ElfFileRAy.JElfChnknQAQAnQAQAϊִ=n WfK ? MF &0**nQAfHצo T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@fHצo04nQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**oQAw+o T&  <T!@w+o0hoQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**pQAeDp T&  <T!@eDp0 pQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMA**0qQA~ Yp T&  <T!@~ Yp0qQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**rQAgZp T&  <T!@gZp08rQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**sQA @p T&  <T!@ @p0h sQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllNA**0tQAZ q T&  <T!@Z q0tQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**uQA (Fq T&  <T!@ (Fq0puQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**vQAq T&  <T!@q0P vQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllOA**0wQA2Rq T&  <T!@2Rq0wQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**xQA:,r T&  <T!@:,rPX xQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**yQAj˜\r T&  <T!@j˜\rPyQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0zQAG %rr T&  <T!@G %rrP@zQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**{QA༫r T&  <T!@༫rP  {QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**|QA;ɕs T&  <T!@;ɕsP |QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOA**0}QAC$s T&  <T!@C$sP}QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**~QAb_s T&  <T!@b_sP l ~QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QA!s T&  <T!@!sPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAs T&  <T!@sPT QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAȺt T&  <T!@ȺtPt QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll**QAmf[t T&  <T!@mf[tP ,QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0QA Xt T&  <T!@ XtP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA]t T&  <T!@]tPP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**QA'E(u T&  <T!@'E(uP$QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0QAr=u T&  <T!@r=uP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAנHwu T&  <T!@נHwuP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QA衸u T&  <T!@衸uPhQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll*PA**0QA;Eu T&  <T!@;EuP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAGG)v T&  <T!@GG)v  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QA+Tev T&  <T!@+Tev tQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll-PA**0QA,~v T&  <T!@,~v H QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA>v T&  <T!@>v @ QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**QA~[@w T&  <T!@~[@w  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll0PA**0QAUw T&  <T!@Uw X QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QATkw T&  <T!@Tkw  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QAѠ'w T&  <T!@Ѡ'w L p QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll3PA**0QAg.x T&  <T!@g.x hQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAzAx T&  <T!@zAx 0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QAx T&  <T!@x 0P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll6PA**0QAix T&  <T!@ix 0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAUx T&  <T!@Ux 0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0QA[ony T&  <T!@[ony 0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAuWqy T&  <T!@uWqy 0< $ QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**QA;ly T&  <T!@;ly 0 lQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QA z T&  <T!@ z 0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll01**QArjm T&  <T!@rjm0p QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllFbD**0QA$ T&  <T!@$0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll6eۉ0**QAjg T&  <T!@jgP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll a**QAԿ/ T&  <T!@Կ/Px QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll#**0QA95 T&  <T!@95P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldA0**QAQOn T&  <T!@QOnPT QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllO**QAH6Ӄ T&  <T!@H6ӃP``QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll^ך**0QA胅 T&  <T!@胅PLQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllL0**QA" T&  <T!@"P t QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllJ5G**QA-I T&  <T!@-IP< D QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllLk]**0QA際 T&  <T!@際P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA9Ԅ T&  <T!@9ԄPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllV**QAb: T&  <T!@b:P 8QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0QAtN T&  <T!@tNPDQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllE7J0**QAhL T&  <T!@hLPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll>1**QAF텅 T&  <T!@F텅P@, QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllԚ**0QA@ T&  <T!@@P@QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllz0**QA*: T&  <T!@*:P@ QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllRC`**QA.E T&  <T!@.EP@4< QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll~u**0QAo T&  <T!@oP@QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllM0**QATI톅 T&  <T!@TI톅@QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**QAR T&  <T!@R@ QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllj(**0QAqf T&  <T!@qfQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllb0**QAM T&  <T!@MQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllE**QAfU T&  <T!@fU t QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0QA# T&  <T!@#QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll $0**QA R T&  <T!@ R0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll]Ѧx**QAض T&  <T!@ض0 4QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll^**0QAö T&  <T!@ö0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**QA T&  <T!@0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll+**QA0i T&  <T!@0i0X QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll1A**0QAs^ T&  <T!@s^0h QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllӍz0**QAaM T&  <T!@aM0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**QA# T&  <T!@#0TQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWp**0QA 42 T&  <T!@ 420hQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll[q-0**QAdy T&  <T!@dy08$QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllwp**QAo~ϊ T&  <T!@o~ϊ0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst. T& T&  <To@G 劅0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkQAWRAQAWRAvR=n WfK ? MF &0**QAG 劅 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@G 劅0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**QA6 T&  <T!@6PlQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**QANb T&  <T!@NbPHQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllMA**0QA0ٗ T&  <T!@0ٗPH QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA0p ы T&  <T!@0p ыP  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QAӌ|5 T&  <T!@ӌ|5Pll QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllNA**0QAJ T&  <T!@JPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA 僌 T&  <T!@ 僌PL QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QA.  T&  <T!@. PQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAsm T&  <T!@smPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA?S6 T&  <T!@?S6P8QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QA CL T&  <T!@ CLP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAL W T&  <T!@L WP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA 鍅 T&  <T!@ 鍅P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QAܻM T&  <T!@ܻMPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0QA)'c T&  <T!@)'cPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAF򝎅 T&  <T!@F򝎅P ,QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QAK T&  <T!@KP@QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAl T&  <T!@lPTQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA"i T&  <T!@"iPTQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QAdC T&  <T!@dCP $QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0QA90ȏ T&  <T!@90ȏPQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA T&  <T!@P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QAe T&  <T!@eP ,QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0QA`{ T&  <T!@`{P`QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAF T&  <T!@FP (QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QAl T&  <T!@lP  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll*PA**0QABu. T&  <T!@Bu.P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA@i T&  <T!@@iP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RA3ڑ T&  <T!@3ڑP@|RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll-PA**0RAHᑅ T&  <T!@HᑅPTRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RAj T&  <T!@jP RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RA! T&  <T!@!P ` RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll0PA**0RA  T&  <T!@ 0RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RA_ϒ T&  <T!@_ϒ0dT RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**RAc}1 T&  <T!@c}10  RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll3PA**0RAF T&  <T!@F0RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RA6 T&  <T!@60 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll** RAR( T&  <T!@R(P T RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll6PA**0 RA9 T&  <T!@9 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** RA|C T&  <T!@|C@ RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** RA! T&  <T!@!`  RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0 RA|{ T&  <T!@|{ RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RAN锅 T&  <T!@N锅 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RA3J T&  <T!@3J  RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllw T&  <T!@5>wP@| RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RA* T&  <T!@*P@`RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**RA T&  <T!@RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllHPA**0RAA* T&  <T!@A*D RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RA>g T&  <T!@>g RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**RA9Zɘ T&  <T!@9Zɘ RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllKPA**0RAPݘ T&  <T!@Pݘ0 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** RAV( T&  <T!@V( RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**!RA۽){ T&  <T!@۽){  !RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNPA**0"RA(\ T&  <T!@(\"RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**#RAd̙ T&  <T!@d̙` #RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**$RA80 T&  <T!@80 $RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0%RAh/C T&  <T!@h/C %RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&RAK큚 T&  <T!@K큚%0&RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllXf**'RAw⚅ T&  <T!@w⚅%0h @ 'RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dlly**0(RA! T&  <T!@!%0\(RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllI0**)RA7pG3 T&  <T!@7pG3%0  )RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlly***RAlܢ T&  <T!@lܢ%00X *RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllw,**0+RANҨ T&  <T!@NҨ%0+RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll$9f0**,RA*囅 T&  <T!@*囅%0l,RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll!**-RA3`@I T&  <T!@3`@I(,-RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll/Q**0.RAx[ T&  <T!@x[.RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll]0**/RAae1 T&  <T!@ae1l ` /RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll }**0RA T&  <T!@t 0RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**01RA| T&  <T!@|1RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll,0**2RA'oK T&  <T!@'oKt 2RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll>01**3RADm T&  <T!@Dm3RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllFbD**04RA9M T&  <T!@9M4RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll6eۉ0**5RAV  T&  <T!@V @5RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll a**6RA_ T&  <T!@_ 6RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#**07RA)t T&  <T!@)t<7RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldA0**8RA퇰 T&  <T!@퇰X 8RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllO**9RA  T&  <T!@ p 9RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll^ך**0:RA]s& T&  <T!@]s& :RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllL0**;RA`hd T&  <T!@`hd ;RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllJ5G**RA9 T&  <T!@9 >RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllV**?RA< T&  <T!@<@?RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@RAe T&  <T!@e @RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllE7J0**ARA1**BRAXt6 T&  <T!@Xt6 BRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllԚ**0CRA.rk? T&  <T!@.rk?CRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllz0**DRAq^5 T&  <T!@q^5H 4DRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllRC`**ERA<0ߡ T&  <T!@<0ߡ ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll~u**0FRAC T&  <T!@C8FRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllM0**GRA M1 T&  <T!@ M1 GRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**HRAG^ T&  <T!@G^8 HRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllj(**0IRA T&  <T!@ IRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllb0**JRA  T&  <T!@ `JRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllE**KRALF T&  <T!@LF KRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0LRAHW T&  <T!@HW LRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll $0**MRAWy T&  <T!@Wy MRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll]Ѧx**NRAH  T&  <T!@H "0 PNRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll^**0ORA  T&  <T!@ "0 ORAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**PRAIJ T&  <T!@IJ"0$PRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll+**QRAKƞ T&  <T!@Kƞ@QRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll1A**0RRAYo T&  <T!@Yo RRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllӍz0**SRA T&  <T!@SRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0TRAe fp T&  <T!@e fp TRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**URAhnq T&  <T!@hnqURAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll[q-**VRAxҲ T&  <T!@xҲxl VRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllwp**WRAB3 ?+A0n g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .3 ClientMachine ;_User 2^?ClientProcessId &} Component &ĵ0g Operation (J ResultCode . xb PossibleCause N{0CF6510C-06F8-4A94-972E-D7DFA665C786}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**RAOW`K T&  <T!@OW`K`—E—ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N{DD5FE101-92D5-4D75-B813-70D1121C2E84}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownWi**RAOW`K T&  <T!@OW`K`—E—E4RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N{6187F81A-46D1-49FA-9814-F349470679B0}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown&**RAbK T&  <T!@bK`—E—E4RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N{C8831FB0-6F30-4BEE-BB6D-F24C954E7A0C}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown#F**RA eK T&  <T!@ eK`—E—ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N{247F6E93-F2C3-42C6-87F6-5C560D0523AD}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownC**RAw~gK T&  <T!@w~gK`—E—ExRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N{B0E64731-65FA-4943-A4B7-D4C1E1D1B093}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**RAwnK T&  <T!@wnK`—E—E4RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N{4B55A57B-C159-43DE-8921-B4B17283C65B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownct**0RA@IL T&  <T!@@IL`—E—E RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**RAXG1U T&  <T!@XG1U`—E—E RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dlla**RA;gU T&  <T!@;gU`—E—E RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls** RA2B=m T&  <T!@2B=m`—E—E RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllAct **RA"V T&  <T!@"V`—E—ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**RA ב T&  <T!@ ב`—E—ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N({00000000-0000-0000-0000-000000000000}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2UnknownP**RA ב T&  <T!@ ב`—E—ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N({4597C260-85B8-0000-A9C2-9745B885DB01}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2Unknown**RA+{ T&  <T!@+{`—E—ERAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational  N({4597C260-85B8-0000-A9C2-9745B885DB01}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown**RAk48븅 T&  <T!@k48븅`—E—Ex LRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**0RAc T&  <T!@c`—E—E$RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**RA= T&  <T!@=`—E—E RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RAM T&  <T!@M T RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**0RA2 T&  <T!@2 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**RA)﹅ T&  <T!@)﹅ RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RA!+R T&  <T!@!+R  RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0RAYvqd T&  <T!@Yvqd RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**RA<7 T&  <T!@<7 `RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**RAj  T&  <T!@j  4 XRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll**0RA A T&  <T!@ A 0 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**RAiV T&  <T!@iV | RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RA T&  <T!@ RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0RA"ʻ T&  <T!@"ʻ RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RAw T&  <T!@w H pRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**RAk T&  <T!@k $RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllRWmiPerfI T&  <Tem@|~PQ,RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BF-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkRARARARA!#H2S=n WfK ? MF &0**RA| T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@|~PQ,RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**RA뺼 T&  <T!@뺼~PQ, RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**RAz- T&  <T!@z-~PQ,t p RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllMA**0RA}t/ T&  <T!@}t/~PQ,l RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RAXn T&  <T!@Xn~PQ,RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**RA*н T&  <T!@*н~PQ,P0 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllNA**0RAخ⽅ T&  <T!@خ⽅~PQ, RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RA1 T&  <T!@1~PQ,l RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**RAʃ T&  <T!@ʃ~PQ, RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0RAJd T&  <T!@Jd~PQ,tRAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RA_ᾅ T&  <T!@_ᾅ~PQ, RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**RA:V8B T&  <T!@:V8B70 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOA**0RA2H T&  <T!@2H70 RAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KAn:  T&  <T!@n: 0KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllKIA**KAp42  T&  <T!@p42  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllLIA**0KAWDG  T&  <T!@WDG ( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA<  T&  <T!@< L KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll**KA  T&  <T!@ p KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0KA~  T&  <T!@~ (KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KAW  T&  <T!@W  HKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**KA  T&  <T!@  P KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KA8  T&  <T!@8 (H KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA  T&  <T!@ PKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**0KAl`  T&  <T!@l` ( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA?za  T&  <T!@?za $\KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**KA  T&  <T!@  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**KAK  T&  <T!@K   KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KA4> T&  <T!@4>(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA>p T&  <T!@>p KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**KA\g T&  <T!@\g  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KAK! T&  <T!@K!(DKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA & T&  <T!@ &0| x KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll**KA/c T&  <T!@/c0P KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll^IA**0KAx T&  <T!@x0(` KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA  T&  <T!@ 0 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll`IA**KA T&  <T!@0` KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllaIA**0KAͼ+ T&  <T!@ͼ+0(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA T&  <T!@0KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**KAM T&  <T!@M0@  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0KAS T&  <T!@S0( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KAn= T&  <T!@n=0|<KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll**KA܉{ T&  <T!@܉{0L KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**0KA-] T&  <T!@-] (KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KAN8& T&  <T!@N8&  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**KAK< T&  <T!@K<  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KA2D T&  <T!@2D ( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KA紡 T&  <T!@紡  p KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**KA#A T&  <T!@#A (`KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe(%systemroot%\system32\wbem\wmipcima.dlll**KA T&  <T!@ (`KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe(%SystemRoot%\System32\sppwmi.dllot%**0KA1  T&  <T!@1  (KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllerfI0**KA@H T&  <T!@@H  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAL T&  <T!@L ($KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAT T&  <T!@T (KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAw T&  <T!@w KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KA`ש T&  <T!@`ש (KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA T&  <T!@  0KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAFF T&  <T!@FF (KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAW^\ T&  <T!@W^\ (T KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA~ T&  <T!@~0xKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA T&  <T!@0KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KA_} T&  <T!@_}0(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KANHm T&  <T!@NHm0 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAV̭ T&  <T!@V̭0 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KADQ T&  <T!@DQ(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA( T&  <T!@(xKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA~}_ T&  <T!@~}_ KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAYv T&  <T!@Yv( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA. T&  <T!@.h  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA5C  T&  <T!@5C @KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KA' T&  <T!@'( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA_! T&  <T!@_! KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA  T&  <T!@ KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAų T&  <T!@ų(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAj: T&  <T!@j:T KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAw T&  <T!@wLKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KA T&  <T!@(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA,' T&  <T!@,' KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAe, T&  <T!@e,P KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAp@ T&  <T!@p@( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA`@ T&  <T!@`@ KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAR T&  <T!@RKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAC T&  <T!@C(LKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA/(5P T&  <T!@/(5P8 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA>b T&  <T!@>b KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAn T&  <T!@n(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAJ T&  <T!@J XKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAMC T&  <T!@MC$T KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAX T&  <T!@X(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAkd T&  <T!@kdl KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA>k T&  <T!@>kd KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KA  T&  <T!@ (pKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA/h T&  <T!@/h KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAh T&  <T!@h  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAސ T&  <T!@ސ(| KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA T&  <T!@4 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAR[ T&  <T!@R[h8KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAeq T&  <T!@eq(| KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAeG T&  <T!@eG KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAJ T&  <T!@J KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAn7$ T&  <T!@n7$(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA T&  <T!@ $ KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAݝM T&  <T!@ݝMD KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAFt  T&  <T!@Ft ( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAI3 T&  <T!@I3hKAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA."t T&  <T!@."t  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAb݉ T&  <T!@b݉( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAk  T&  <T!@k | KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA'  T&  <T!@'  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KA?<  T&  <T!@?< ( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAUO{  T&  <T!@UO{ <@KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAq  T&  <T!@q =0l KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KAN  T&  <T!@N =0( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KAI0-L! T&  <T!@I0-L!=00 0KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KAYP! T&  <T!@YP!=0 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0KArW! T&  <T!@rW!=0(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllcfgw0**KA 4! T&  <T!@ 4!=0  KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**KA n?" T&  <T!@ n?"=0 KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfIt.dll2\w T&  <T@'+U"( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ational ElfChnkKAjLAKAjLAx ]7H3=22d3Wf2K ? 3MF 7321&0**KA'+U" T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@'+U"( KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll**KA e" T&  <T!@ e" | KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllZHA**KA5" T&  <T!@5"l KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll[HA**0KA# T&  <T!@#(KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**KABr# T&  <T!@Br# KAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllBIA**LA# T&  <T!@#@ LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllCIA**0LAѺ# T&  <T!@Ѻ#( LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**LA7$ T&  <T!@7$0LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllEIA**LAW$ T&  <T!@W$P < LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllFIA**0LAuNm$ T&  <T!@uNm$(LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**LAt)$ T&  <T!@t)$ lLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllHIA**LA|g % T&  <T!@|g %  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIIA**0LAHx % T&  <T!@Hx %(LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**LA?|% T&  <T!@?|% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllKIA** LA{^% T&  <T!@{^% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllLIA**0 LAJ% T&  <T!@J%( LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0** LA'% T&  <T!@'%P.5 P LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe %systemroot%\system32\wbem\cimwin32.dllC** LA% T&  <T!@%MbMayL T LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe %systemroot%\system32\wbem\wmipcima.dll.d** LA`% T&  <T!@`%MbMayL T LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe %SystemRoot%\System32\smbwmiv2.dllWmiP**(LA% T&  <T!@%MbMayLLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1Em>B3 ?+A1n g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI2[Id .23 ClientMachine 2_User 22?ClientProcessId &73} Component &d31g Operation (3J ResultCode .3xb PossibleCause N{2DEF235E-50C4-49D2-A0D5-96F541836EC9}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**LA- % T&  <T!@- %MbMayLDLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N{8C3DDDD9-7B15-41D0-AE41-5F7D197BBEFC}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownip**LA2% T&  <T!@2%MbMayLLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N{6452B114-CAA8-4890-9ED6-1FF98448D5D4}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**LA% T&  <T!@%\%% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N{92C8E33E-1768-4799-8DDD-234BC7C4434F}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownin**LA% T&  <T!@%\%% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N{789B741D-4D1D-428B-9F65-974A44DD1841}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownt%**LA% T&  <T!@%\%%LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N{AD106ADB-52C1-4CF0-8531-8DD1DFCA6FB1}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown **LA% T&  <T!@%\%%LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N{57C95920-0744-4572-B789-EE630202BDD5}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**LAӊ& T&  <T!@ӊ&\%% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dlla**LA1& T&  <T!@1&\%% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**LA)=& T&  <T!@)=&\%% TLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe %systemroot%\system32\wbem\cimwin32.dllvit** LAD& T&  <T!@D&\%% PLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe %systemroot%\system32\wbem\ntevt.dllWMI **LAA 0& T&  <T!@A 0&\%% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**LA+=& T&  <T!@+=&\%% LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N({F0C8C75C-8425-0000-A7C7-C8F02584DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2Unknown3**LA+=& T&  <T!@+=&\%%dLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N({F0C8C75C-8425-0000-A7C7-C8F02584DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2Unknown**LA;k=& T&  <T!@;k=&\%%dLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Ʃ1N({F0C8C75C-8425-0000-A7C7-C8F02584DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown2_**LA>o& T&  <T!@>o&\%%LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0LAC& T&  <T!@C&\%% lLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**LAY& T&  <T!@Y&\%%` LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll32_** LA2^"' T&  <T!@2^"'\%% < LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0!LAc8' T&  <T!@c8'  !LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**"LA6' T&  <T!@6'P"LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll32_**#LA%(' T&  <T!@%(' #LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0$LA;' T&  <T!@;' L$LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**%LA|H( T&  <T!@|H(x%LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll32_**&LA=̖( T&  <T!@=̖(4&LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0'LA~( T&  <T!@~( P'LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**(LAeX( T&  <T!@eX(` (LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**)LA.:) T&  <T!@.:))LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0*LAP) T&  <T!@P) P*LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**+LA) T&  <T!@)p +LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll32_**,LA) T&  <T!@) h ,LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0-LA_* T&  <T!@_* -LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**.LA`* T&  <T!@`*P.5`.LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**/LA]z* T&  <T!@]z*P.5  /LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**00LA4* T&  <T!@4*P.5 40LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**1LA+g!+ T&  <T!@+g!+P.5 1LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**2LAiMS+ T&  <T!@iMS+P.5 2LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**03LAi+ T&  <T!@i+P.5 \3LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**4LAdc+ T&  <T!@dc+P.5 4LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**5LA), T&  <T!@),P.5 5LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**06LAL, T&  <T!@L,P.5 $ 6LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**7LAaPx, T&  <T!@aPx,P.5 47LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**8LAa, T&  <T!@a,P.5X 8LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**09LA, T&  <T!@,P.5  9LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**:LA+- T&  <T!@+-P.5 :LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**;LAwz- T&  <T!@wz-P.5;LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0LAR!. T&  <T!@R!.P.5T>LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**0?LAvU4. T&  <T!@vU4.P.5 (?LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**@LA-. T&  <T!@-.P.5 @LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**ALA4b. T&  <T!@4b.0D ALAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0BLA*. T&  <T!@*.0  BLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**CLAZ+D/ T&  <T!@Z+D/0(pCLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll32_**DLA:>/ T&  <T!@:>/0( DLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**0ELAI/ T&  <T!@I/0 |ELAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**FLAԡ0 T&  <T!@ԡ000` FLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll32_**GLANG 70 T&  <T!@NG 700DGLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**0HLA!L0 T&  <T!@!L00 HLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**ILAT<0 T&  <T!@T<00L ILAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**JLA0 T&  <T!@00 JLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0KLA0 T&  <T!@00 hKLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**LLA0\1 T&  <T!@0\10 LLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**MLA21 T&  <T!@210 MLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0NLAK4v1 T&  <T!@K4v10 NLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**OLA72 T&  <T!@720\ OLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll32_**PLAT^2 T&  <T!@T^20 PLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0QLAFe2 T&  <T!@Fe20 QLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**RLA2 T&  <T!@2T RLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**SLAna3 T&  <T!@na3,SLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0TLAF3 T&  <T!@F3 TLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**ULAՃt3 T&  <T!@Ճt3H |ULAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll32_**VLAbD-3 T&  <T!@bD-3 l VLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0WLA3 T&  <T!@3 H WLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**XLA6`'4 T&  <T!@6`'4 XLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**YLA:h4 T&  <T!@:h4 YLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ZLA,}4 T&  <T!@,}4 H ZLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**[LA44 T&  <T!@44 [LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**\LAV5 T&  <T!@V5 \LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0]LA105 T&  <T!@105 ]LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**^LAK5 T&  <T!@K5 H^LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**_LAG5 T&  <T!@G5 X_LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0`LA,ln5 T&  <T!@,ln5  `LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**aLAD?@6 T&  <T!@D?@6 aLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**bLAi}6 T&  <T!@i}6 bLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0cLA>6 T&  <T!@>6 cLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**dLALSj6 T&  <T!@LSj6$ dLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**eLAE&B7 T&  <T!@E&B7`eLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0fLA_ I7 T&  <T!@_ I7 DfLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**gLA7 T&  <T!@7 gLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**hLA?7 T&  <T!@?7 0<hLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll**0iLA/7 T&  <T!@/7 0 DiLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliPer0**jLABX8 T&  <T!@BX8 0 jLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_N32_TERMINAL T&  <Tsy@8 0 kLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Rdows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkkLALAkLALA6cN=n WfK ? MF &0**kLA8 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@8 0 kLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0lLAOj8 T&  <T!@Oj8 0 lLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllZHA0**mLA 9 T&  <T!@ 9 0  mLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll[HA**nLA@K9 T&  <T!@@K9 0 nLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0oLA[Ba9 T&  <T!@[Ba9 0 oLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllBIA0**pLAa79 T&  <T!@a79 00 8pLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllCIA**qLA^9 T&  <T!@^9 0d qLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0rLAZ: T&  <T!@Z: 0 rLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllEIA0**sLAXp: T&  <T!@Xp: 0llsLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllFIA**tLA̵i: T&  <T!@̵i: 0 tLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0uLAT2: T&  <T!@T2: 0 uLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllHIA0**vLA-$; T&  <T!@-$; 0H vLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllIIA**wLAFd; T&  <T!@Fd; wLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0xLA-z; T&  <T!@-z;  xLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllKIA0**yLA#; T&  <T!@#; |yLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllLIA**zLAg(< T&  <T!@g(< ` t zLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0{LA[@,< T&  <T!@[@,<   {LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**0**|LA < T&  <T!@ < ,|LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll LA**}LA)< T&  <T!@)< }LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0~LAcݪ< T&  <T!@cݪ<  ~LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllId0**LAW<= T&  <T!@W<= ` LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllbe**LA= T&  <T!@==0dLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0LA[}= T&  <T!@[}==0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll%M0**LA׹= T&  <T!@׹==0`HLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllare**LA7/> T&  <T!@7/>=0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllC7C**0LAsPE> T&  <T!@sPE>=0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllicro0**LAՁ> T&  <T!@Ձ>=0h LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**LAOi> T&  <T!@Oi>=0 8LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllod **0LAwe#> T&  <T!@we#>=0  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll{57C0**LA1UU? T&  <T!@1UU?P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**LA4? T&  <T!@4?P.5\ LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll**0LAS? T&  <T!@S?P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMI-A0**LA@ T&  <T!@@P.5LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**LAH@ T&  <T!@H@P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0LA]@ T&  <T!@]@P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll#F0**LA$@ T&  <T!@$@P.5( LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll&**LAܲ A T&  <T!@ܲ AP.5`LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllrt **0LAA T&  <T!@AP.5 | LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LA]mA T&  <T!@]mAP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllL**LAz9A T&  <T!@z9AP.58 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllL**0LAT(qA T&  <T!@T(qAP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll L0**LA0"B T&  <T!@0"BP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll L**LAG`B T&  <T!@G`BP.5LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll !L**0LAHAvB T&  <T!@HAvBP.5 H LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll"L0**LA\B T&  <T!@\BP.5t LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll#L**LAPC T&  <T!@PCP.5hLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$L**0LA(v)C T&  <T!@(v)CP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll%L0**LA$KVC T&  <T!@$KVC dLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&L**LA_/C T&  <T!@_/CX LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll'L**0LA0NC T&  <T!@0NC  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll` (L0**LA̡9D T&  <T!@̡9DD LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll)L**LAKxD T&  <T!@KxD LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll*L**0LAD T&  <T!@D LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll +L0**LAD T&  <T!@D LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll ,L**LAJ+E T&  <T!@J+E\ t LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll-L**0LA`AE T&  <T!@`AE 4 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll`.L0**LAe5E T&  <T!@e5E LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll /L**LA]E T&  <T!@]E$LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll0L**0LA9bE T&  <T!@9bE LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 1L0**LA\F T&  <T!@\FdLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 2L**LAF T&  <T!@F|0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll3L**0LAF T&  <T!@F p LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll4L0**LA=G T&  <T!@=G LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll5L**LASADG T&  <T!@SADGt LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 6L**0LA(ZG T&  <T!@(ZG  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll47L0**LA.G T&  <T!@.GP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 8L**LAp G T&  <T!@p GP.5 LLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 9L**0LA# H T&  <T!@# HP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:L0**LApt|H T&  <T!@pt|HP.58LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll;L**LA+H T&  <T!@+HP.5< @LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllL**LA \I T&  <T!@ \IP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll?L**0LAӂrI T&  <T!@ӂrIP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll@L0**LAڒ'I T&  <T!@ڒ'IP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAL**LAZJ T&  <T!@ZJ&0LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll BL**0LA!U%J T&  <T!@!U%J&0  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllpCL0**LA=ɄJ T&  <T!@=ɄJ&0` \LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll DL**0LA!(J T&  <T!@!(J&0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllroso0**LA;EJ T&  <T!@;EJ&0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll FL**LA1\EK T&  <T!@1\EK&0` LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllGL**LA>uK T&  <T!@>uK&0` LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllHL**0LAK T&  <T!@K&0 L LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllL IL0**LA<#K T&  <T!@<#KLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll JL**LA (L T&  <T!@ (L LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllKL**0LA84=L T&  <T!@84=L LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll LL0**LAH>L T&  <T!@H>L`LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll ML**LAL T&  <T!@L LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNL**0LAnL T&  <T!@nL XLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll OL0**LANX_M T&  <T!@NX_M LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll PL**LA M T&  <T!@ M0LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllQL**0LA)xM T&  <T!@)xM LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllT RL0**LAN T&  <T!@NLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllSL**LA͎@N T&  <T!@͎@Np L LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllTL**0LAHKVN T&  <T!@HKVN  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll|UL0**LA1Y-N T&  <T!@1Y-NLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll VL**LAmN T&  <T!@mN$ LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll WL**0LA O T&  <T!@ O LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll XL0**LAS 4iO T&  <T!@S 4iO\` LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll YL**LA"[O T&  <T!@"[OLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll ZL**0LAlO T&  <T!@lO LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll[L0**LA P T&  <T!@ P LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll \L**LAsVYP T&  <T!@sVYPP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll]L**0LA`nP T&  <T!@`nPP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllH^L0**LAPP T&  <T!@PPP.5< LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_L**LAhe2 Q T&  <T!@he2 QP.5x LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll `L**0LA!Q T&  <T!@!QP.5 $LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllaL0**LAtQ T&  <T!@tQP.5|p LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllbL**LAhQ T&  <T!@hQP.5h LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllcL**0LAWgQ T&  <T!@WgQP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll$ dL0**0LAsDcR T&  <T!@sDcR0 ` LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllroso0**LA~weR T&  <T!@~weR0  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**LAjR T&  <T!@jR0 T LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll gL**0LAS T&  <T!@S0 p LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllroso0**LAʖS T&  <T!@ʖS0LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0LA$S T&  <T!@$S0  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllroso0**LAIT T&  <T!@IT0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso-Windows-WMI T&  <Tvity/Operational 000Rdows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkLATMALATMAhxYJ9i2w=n WfK ? MF &0**LAD{T T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@D{TP.5 hLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**LAnT T&  <T!@nTP.5 xLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**LA U T&  <T!@ UP.5XLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0LA.U T&  <T!@.UP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlloLA0**LAU T&  <T!@UP.5 H LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0LAgU T&  <T!@gUP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllqLA0**LAaV T&  <T!@aVP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrLA**0LAkF8V T&  <T!@kF8VP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllsLA0**LAxW T&  <T!@xW/0\ LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dlltLA**0LA GW T&  <T!@ GW/0 <LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LAW T&  <T!@W/0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**LA1'W T&  <T!@1'W/0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIIA**0LAW T&  <T!@W/0 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LAk#zX T&  <T!@k#zX/0T| LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllKIA**0LA<1X T&  <T!@<1XP.5 @LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LAA4-Y T&  <T!@A4-YP.5xLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**0LA _Y T&  <T!@ _YP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LAbY T&  <T!@bYP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0LApXZ T&  <T!@pXZP.5  LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LAkْZ T&  <T!@kْZP.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**LAh fZ T&  <T!@h fZP.5LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllLA**0LAd+Z T&  <T!@d+ZP.5 @LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LASN[ T&  <T!@SN[P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllLA**LA{?b[ T&  <T!@{?b[P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllLA**0LA\Vx[ T&  <T!@\Vx[P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LA[ T&  <T!@[;0LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllLA**LA\ T&  <T!@\;0HLAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllLA**0LAX*\ T&  <T!@X*\;0 t LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LAؐ\ T&  <T!@ؐ\;0( LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllLA**LA{\ T&  <T!@{\P.5(LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllLA**0LAA\ T&  <T!@A\P.5 T LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**LA"^] T&  <T!@"^]P.5 LAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllA**MAll] T&  <T!@ll]P.5PMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0MAX|y] T&  <T!@X|y]P.5 \MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA@e^ T&  <T!@@e^P.5x MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll#F**MA~-^ T&  <T!@~-^P.5xMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll&**0MAlTLC^ T&  <T!@lTLC^P.5  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MAC^ T&  <T!@C^P.50MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**MA"^ T&  <T!@"^P.5MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllL**0MA,^ T&  <T!@,^P.5 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA9Yu_ T&  <T!@9Yu_P.5 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll L** MAcC_ T&  <T!@cC_P.5 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll L**0 MA9_ T&  <T!@9_P.5  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0** MA 2` T&  <T!@ 2`P.5  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld** MAGcA` T&  <T!@GcA`P.5(X MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllst.**0 MA?[` T&  <T!@?[`P.5   MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**MA`l` T&  <T!@`l`P.50 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MAda T&  <T!@da XMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**MAVha T&  <T!@Vhap MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllLA**MAa T&  <T!@aMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MApla T&  <T!@pla MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**MAf=Ab T&  <T!@f=Abp MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllLA**MAt^b T&  <T!@t^bpMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MA|?tb T&  <T!@|?tb MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**MAb T&  <T!@b MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllL**MA-c T&  <T!@-c8MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0MA'c T&  <T!@'c MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll /L0**MAqc T&  <T!@qcMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll0L**MA#c T&  <T!@#cMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0MAwc T&  <T!@wc p MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 2L0**MA؋ Zd T&  <T!@؋ Zd0 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll3L**MAgvd T&  <T!@gvd0MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0MA%d T&  <T!@%d0 @ MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll5L0**MAǿ e T&  <T!@ǿ e0d MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll 6L** MAkM)e T&  <T!@kM)edh MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0!MAI?e T&  <T!@I?e @ !MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 8L0**"MAe T&  <T!@e  "MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**#MA>e T&  <T!@>e #MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0$MAbe T&  <T!@be $MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**%MA9rf T&  <T!@9rf%MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**&MA$tf T&  <T!@$tf&MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0'MA:3f T&  <T!@:3f 4 'MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**(MA0<&g T&  <T!@0<&g t(MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**)MA8s=Bg T&  <T!@8s=Bg )MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0*MAtXg T&  <T!@tXg *MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**+MAXg T&  <T!@Xgd +MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**,MAg T&  <T!@g` ,MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0-MAx h T&  <T!@x h  -MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**.MAh T&  <T!@h p.MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllR**/MAih T&  <T!@ih/MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**00MA1%h T&  <T!@1%h 0MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**1MAz&=i T&  <T!@z&=iT1MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**2MA6Zi T&  <T!@6Zi2MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**03MApi T&  <T!@pi  3MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**4MA i T&  <T!@ i4MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**5MA! j T&  <T!@! j5MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**06MAS#j T&  <T!@S#j  6MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**7MAij T&  <T!@ij\7MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**8MA0^j T&  <T!@0^j\8MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**09MA)j T&  <T!@)j 0 9MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**:MAWk T&  <T!@Wk \ :MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**;MA"ek T&  <T!@"ekp;MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll **0MA];l T&  <T!@];l >MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**?MAKl T&  <T!@Kl0?MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0@MAjl T&  <T!@jl P@MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**AMA_nm T&  <T!@_nm40 AMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0BMAAptm T&  <T!@Aptm  BMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**CMA~"n T&  <T!@~"n CMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**DMA:0n T&  <T!@:0n DMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**0EMAITn T&  <T!@ITn EMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**FMA n T&  <T!@ n\l FMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllmiP**GMAXn T&  <T!@Xn\PGMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllemR**0HMAq o T&  <T!@q o x HMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**IMAKo T&  <T!@Ko IMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**JMA-o T&  <T!@-o \ JMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**0KMA[o T&  <T!@[o xKMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**LMA69p T&  <T!@69pp LMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllmiP**MMAAkWp T&  <T!@AkWpp MMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllemR**0NMAпlp T&  <T!@пlp NMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**OMA7)p T&  <T!@7)p |OMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlli**PMA;DWp T&  <T!@;DWp <PMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0QMAm q T&  <T!@m q  QMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**RMA#\q T&  <T!@#\q@ RMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0SMAEjq T&  <T!@Ejq SMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**TMA8 Rr T&  <T!@8 Rr0 TMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wiows\System32 T&  <TT@u:r0 UMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFational ElfChnkUMAMAUMAMAHx!tv=n WfK ? MF &0**UMAu:r T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@u:r0 UMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**VMARs T&  <T!@Rs0X x VMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllLA**0WMA8s T&  <T!@8s0 P WMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**XMA\s T&  <T!@\s0 t XMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**YMAqp s T&  <T!@qp s0`YMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0ZMAks T&  <T!@ks0 ZMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllqLA0**[MAjnjt T&  <T!@jnjt0[MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrLA**\MAdt T&  <T!@dt0 \MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0]MAt T&  <T!@t0 ]MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltLA0**^MAu T&  <T!@u0^MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**_MA%-:u T&  <T!@%-:u0_MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllpro**0`MA6~Pu T&  <T!@6~Pu0 `MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**aMAu T&  <T!@u0aMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**bMA-u T&  <T!@-u bMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0cMAqV[v T&  <T!@qV[v cMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmi.d0**dMA"hcv T&  <T!@"hcv<0 dMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**eMAv T&  <T!@v<0 eMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0fMA..v T&  <T!@..v<0 fMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**gMA$7w T&  <T!@$7w<0 gMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0hMAhiw T&  <T!@hiw<0  hMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllipro0**iMAw T&  <T!@w<0 iMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0jMAAx T&  <T!@Ax<0  jMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmi.d0**kMA:䇛x T&  <T!@:䇛x<0XhkMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllst.**0lMAx T&  <T!@x<0  lMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**mMAinPy T&  <T!@inPy<0 mMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**nMAo_y T&  <T!@o_y<0 nMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0oMAF{y T&  <T!@F{y<0  oMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**pMA؇Dz T&  <T!@؇Dz<0 pMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0qMA?=z T&  <T!@?=z qMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**rMAwz T&  <T!@wz` rMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllLA**0sMA!z T&  <T!@!z sMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**tMA8h{ T&  <T!@8h{p tMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllMA**0uMAy{ T&  <T!@y{ uMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**vMA| T&  <T!@| vMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**wMA?.)| T&  <T!@?.)|@LwMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll#F**0xMAL| T&  <T!@L|  xMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**yMA| T&  <T!@| D yMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**zMApc| T&  <T!@pc| zMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0{MA"| T&  <T!@"| {MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**|MAP} T&  <T!@P} |MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**}MAŦ} T&  <T!@Ŧ} }MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll L**0~MAm} T&  <T!@m} 4 ~MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA.]:3~ T&  <T!@.]:3~0 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**MAa~O~ T&  <T!@a~O~MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll MA**0MA^NAMA>NA1{:a:~=n WfK ? MF &0**MA1 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@1 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0MAQȔ T&  <T!@QȔ hMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllLA0**MA_%E T&  <T!@_%E MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**MAS T&  <T!@S` MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllwbe**0MA|r T&  <T!@|r MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlli.d0**MA T&  <T!@(MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0MAN% T&  <T!@N% (MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllrLA0**MAEc T&  <T!@Ec MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0MA!ؖ T&  <T!@!ؖ  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltLA0**MACZ T&  <T!@CZ| MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0MAr T&  <T!@r  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MAtC T&  <T!@tC MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**MA70 T&  <T!@70 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0MA= T&  <T!@= MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllcMA0**MAØ T&  <T!@Øh MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MA T&  <T!@ MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MAar T&  <T!@ar MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0MAvo T&  <T!@vo MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MAf0 T&  <T!@f00D pMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0MA,DV T&  <T!@,DV0 <MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA8ܚ T&  <T!@8ܚ0 \MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**MA>:Ꚅ T&  <T!@>:Ꚅ0 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MA&  T&  <T!@& 0 h MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlllMA0**MAD T&  <T!@D0| MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MA T&  <T!@  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MAx6'C T&  <T!@x6'C8MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0MA9n T&  <T!@9n @MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA T&  <T!@L MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll**0MA! T&  <T!@! h MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MAү T&  <T!@ү MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**MA6a T&  <T!@6aD MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MA$Leԝ T&  <T!@$Leԝ MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlluMA0**MAķ)W T&  <T!@ķ)WMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**MAvqq T&  <T!@vqqMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0MA5 T&  <T!@5 < MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA T&  <T!@plMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll**MA5;$ T&  <T!@5;$p MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll**0MA^ : T&  <T!@^ : MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA6 T&  <T!@6 XMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0MA쟄 T&  <T!@쟄 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA@ar T&  <T!@@ar MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**MA'䀠 T&  <T!@'䀠 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0MA T&  <T!@ ` MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**MAj# T&  <T!@j#L MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllMA**0MAR T&  <T!@R MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**MAҡ T&  <T!@ҡ @ MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0MA\V T&  <T!@\V  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA( T&  <T!@(?0MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0MA4+ T&  <T!@4+?0  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**MA+29 T&  <T!@+29?0 xMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**MAG T&  <T!@G?0 hMAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMA**0MA4 j T&  <T!@4 j?0  MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**MA,룄 T&  <T!@,룄?0 MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMA**0MAG T&  <T!@G < MAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**NAT T&  <T!@T04NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0NAФ T&  <T!@Ф T NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA,[ T&  <T!@,[NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0NAv T&  <T!@v T NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAx} T&  <T!@x} NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NAR T&  <T!@R PNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMA**0NAI6 T&  <T!@I6  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**NA J T&  <T!@ J p NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMA**0NA馄 T&  <T!@馄  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0** NAek T&  <T!@ek p NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0 NAX񛧄 T&  <T!@X񛧄 | NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0** NAt) T&  <T!@t)H  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**0 NA(XN T&  <T!@(XN  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0** NAΨ T&  <T!@Ψ  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NAf9dݨ T&  <T!@f9dݨ( NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllMA**0NA’ T&  <T!@’ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**NAw T&  <T!@w< NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllMA**NAߕ T&  <T!@ߕ< T NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0NAJ T&  <T!@J NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAk3 T&  <T!@k3NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NAQ T&  <T!@Q NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0NAB=g T&  <T!@B=g NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAS T&  <T!@SNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**0NAd} T&  <T!@d} NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA暫 T&  <T!@暫&0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**NAUn T&  <T!@Un&0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0NA̫ T&  <T!@̫&0 T NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmi.d0**NAIM T&  <T!@IM&0lLNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**0NA- T&  <T!@- 0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA'S T&  <T!@'SXNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllT**0NAh2 T&  <T!@h2 pNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAcM T&  <T!@cMh NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll****0 NA]孄 T&  <T!@]孄  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllvide0**!NANf T&  <T!@Nf (!NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllR**"NAyt T&  <T!@ytt "NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0#NA3 T&  <T!@3 \#NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**$NAf,W T&  <T!@f,W T$NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0%NA'S T&  <T!@'S  %NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**&NAe̯ T&  <T!@e̯ <&NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllyst**0'NAHf T&  <T!@Hf 0'NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**(NAKR~ T&  <T!@KR~ 8(NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0)NA`e T&  <T!@`e )NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0***NAV0 T&  <T!@V0 *NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllR**+NA~0? T&  <T!@~0?x +NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0,NAڀc T&  <T!@ڀc ,NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**-NA/ȝ㱄 T&  <T!@/ȝ㱄  -NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**.NA, T&  <T!@, .NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0/NAPQ T&  <T!@PQ  /NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllsyst0**0NAs T&  <T!@s| 0NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll2\w**1NAŰb T&  <T!@Űb| X1NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll **02NAjʲ T&  <T!@jʲ D 2NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll32\w0**3NAWHPH T&  <T!@WHPH 3NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **4NAa.f T&  <T!@a.f 4NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**05NA{ T&  <T!@{ 5NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**6NAj  T&  <T!@j  T6NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlle**7NA<  T&  <T!@<  7NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**08NAx;. T&  <T!@x;.  8NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll %0**9NA" T&  <T!@"50(9NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**:NAFִ T&  <T!@Fִ50:NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllv**0;NAEᴄ T&  <T!@Eᴄ ;NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**NAq T&  <T!@q >NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllov0miprvse.exe T&  <T{Microsoft-W T&  <TFational ElfChnk?NANA?NANAeW`=n WfK ? MF &0**?NA8 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@8<?NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll\t**@NAK1 T&  <T!@K1<0@NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0ANAGLI T&  <T!@GLI TANAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**BNAƶ T&  <T!@ƶ |BNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlle**CNAp,ն T&  <T!@p,նl@CNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0DNAΛ T&  <T!@Λ \DNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\ts0**ENAx T&  <T!@x4 ENAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**FNAr T&  <T!@rFNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0GNA_ T&  <T!@_ GNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**HNAhY6 T&  <T!@hY6HNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0INA_ T&  <T!@_ `INAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**JNA޸ T&  <T!@޸ JNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllpro**KNA" T&  <T!@" KNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0LNA) T&  <T!@) TLNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmi.d0**MNA}vq T&  <T!@}vq h MNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**NNA T&  <T!@\NNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllemR**0ONAgŹ T&  <T!@gŹ ONAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**PNAD T&  <T!@D PNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**QNAqb T&  <T!@qb @QNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0RNA5Ax T&  <T!@5Ax RNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**SNAF  T&  <T!@F  hSNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllyst**TNA= T&  <T!@= TNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0UNA + T&  <T!@ + UNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**VNAJ! T&  <T!@J! hVNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**WNA Ȼ T&  <T!@ Ȼ WNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0XNA!ݻ T&  <T!@!ݻ XNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll32\w0**YNAЩ\ T&  <T!@Щ\ YNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**ZNAk T&  <T!@kZNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**0[NA! T&  <T!@! [NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllprvs0**\NA T&  <T!@40H \NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll %**]NAH3- T&  <T!@H3-40` ]NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0^NAC T&  <T!@C  ^NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**_NA1I½ T&  <T!@1I½_NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**`NAXང T&  <T!@XངX `NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0aNAYoV T&  <T!@YoV aNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**bNAu T&  <T!@u bNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**cNA,Y T&  <T!@,YcNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0dNAp+ T&  <T!@p+ dNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**eNA%( T&  <T!@%( eNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlle**fNArd7 T&  <T!@rd7 \fNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0gNAI\ T&  <T!@I\ |gNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll %0**hNAd{ۿ T&  <T!@d{ۿ4 hNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**iNA(  T&  <T!@( 0 iNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllv**0jNAa T&  <T!@a jNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**kNA k T&  <T!@ k kNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllv**lNAW T&  <T!@W lNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmip**0mNA T&  <T!@ mNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllov0**nNA @ T&  <T!@ @ TnNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmip**oNA<^ T&  <T!@<^ p oNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMIN**0pNA& wt T&  <T!@& wt  pNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllrvse0**qNA T&  <T!@ qNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe %systemroot%\system32\wbem\wmipcima.dllse**rNAnE T&  <T!@nE rNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe %SystemRoot%\System32\sppwmi.dll_TE**0sNA T&  <T!@  sNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllt0**tNA T&  <T!@ tNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll_**uNAtjU„ T&  <T!@tjU„ uNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0vNAN'„ T&  <T!@N'„  vNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlln32_0**wNAF„ T&  <T!@F„h wNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**xNA@B[„ T&  <T!@@B[„h xNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**0yNA„ T&  <T!@„ \ yNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll00**zNAXÄ T&  <T!@XÄzNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**{NAU)wÄ T&  <T!@U)wÄ {NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0|NAÄ T&  <T!@Ä |NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**}NA, Ą T&  <T!@, Ą|  }NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll**~NA(,Ą T&  <T!@(,Ą| ~NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllona**0NA?Ą T&  <T!@?Ą NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAݟþĄ T&  <T!@ݟþĄ <NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**NA HĄ T&  <T!@ HĄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0NAĄ T&  <T!@Ą  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlly/Op0**NA|ń T&  <T!@|ńT NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0NAlń T&  <T!@lń  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA$&Ƅ T&  <T!@$&Ƅ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**NAoBƄ T&  <T!@oBƄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0NAUU=XƄ T&  <T!@UU=XƄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAz_Ƅ T&  <T!@z_Ƅ\NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllona**NA+EƄ T&  <T!@+EƄ\ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllona**0NA* DŽ T&  <T!@* DŽ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA@_DŽ T&  <T!@@_DŽ dNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**NAADŽ T&  <T!@ADŽ(NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0NAeDŽ T&  <T!@eDŽ  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlly/Op0**NAE=Ȅ T&  <T!@E=Ȅ| NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllona**0NA@pȄ T&  <T!@@pȄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA?BȄ T&  <T!@?BȄ\NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllona**0NA#Ʉ T&  <T!@#Ʉ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA@Ʉ T&  <T!@@Ʉ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0NA.]Ʉ T&  <T!@.]Ʉ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAL Wʄ T&  <T!@L Wʄ PNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**NAeʄ T&  <T!@eʄNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0NA*3ʄ T&  <T!@*3ʄ  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlly/Op0**NA=˄ T&  <T!@=˄xlNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllona**NA?&˄ T&  <T!@?&˄xNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllona**0NA2<˄ T&  <T!@2<˄ l NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliona0**NAQ˄ T&  <T!@Q˄ L NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**NAb˄ T&  <T!@b˄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0NA˄ T&  <T!@˄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlliona0**NAjbm̄ T&  <T!@jbm̄NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**NA=Oދ̄ T&  <T!@=Oދ̄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0NA"̄ T&  <T!@"̄  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NA ̈́ T&  <T!@ ̈́ X NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**NA/̈́ T&  <T!@/̈́PNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0NAPT̈́ T&  <T!@PT̈́  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NAT̈́ T&  <T!@T̈́NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**NÄ́ T&  <T!@̈́ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0NARcQ΄ T&  <T!@RcQ΄ ( NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NAX΄ T&  <T!@X΄#0NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**NAa`΄ T&  <T!@a`΄#0NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0NAȝ&΄ T&  <T!@ȝ&΄#0  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NAFͣ9τ T&  <T!@Fͣ9τ#0 T NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**NA"TWτ T&  <T!@"TWτ#0  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0NAulτ T&  <T!@ulτ#0  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NA5nτ T&  <T!@5nτ#0 \NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**NAτ T&  <T!@τ#0|NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllAct**0NAЄ T&  <T!@Є#0  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NA1Є T&  <T!@1Є#0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**NA#Є T&  <T!@#Є#0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0NA&Є T&  <T!@&Є#0  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll-Act0**NA\Qф T&  <T!@\Qф#0< NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllAct**NA]oф T&  <T!@]oф#0<,NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllActity/Operatio T&  <TVI@&qф#0 8NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFft-W T&  <TFational ElfChnkNA(OANA(OA(v跾=k=n WfK ? MF &0**NA&qф T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@&qф#0 8NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**NA@ć҄ T&  <T!@@ć҄#0@ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**NAu"҄ T&  <T!@u"҄#0@4NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllMA**0NA8G8҄ T&  <T!@8G8҄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA›҄ T&  <T!@›҄ @ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NA)]҄ T&  <T!@)]҄$ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0NA҄ T&  <T!@҄ D NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA^jӄ T&  <T!@^jӄNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NA <ӄ T&  <T!@ <ӄt NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0NAKӄ T&  <T!@Kӄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA6+Ԅ T&  <T!@6+ԄTl NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0NAbJPԄ T&  <T!@bJPԄ l NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NALԄ T&  <T!@LԄPNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NA"oԄ T&  <T!@"oԄx NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0NA}Մ T&  <T!@}Մ  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA{"̃Մ T&  <T!@{"̃Մ  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NANՄ T&  <T!@NՄ0NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0NA5jՄ T&  <T!@5jՄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAEE5ք T&  <T!@EE5ք NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NA~Sք T&  <T!@~Sք4 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0NA:iք T&  <T!@:iք  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA/ք T&  <T!@/քlNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**NA Lׄ T&  <T!@ LׄlHNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllsys**0NAhV$ׄ T&  <T!@hV$ׄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAgׄ T&  <T!@gׄ,NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll**NAׄ T&  <T!@ׄ, NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0NA[ׄ T&  <T!@[ׄ xNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAe-N؄ T&  <T!@e-N؄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NA2\؄ T&  <T!@2\؄D NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0NA 4؄ T&  <T!@ 4؄ \NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAtل T&  <T!@tل0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**NADل T&  <T!@Dل0 l NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0NA6 4ل T&  <T!@6 4ل0  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA2ֲل T&  <T!@2ֲل0NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NA(ل T&  <T!@(ل0NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0NAF[ل T&  <T!@F[ل0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAHgڄ T&  <T!@Hgڄ0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**NA6ڄ T&  <T!@6ڄ0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0NAZ+ڄ T&  <T!@Z+ڄ < NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAۄ T&  <T!@ۄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NA^j'ۄ T&  <T!@^j'ۄTNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll %**0NAMۄ T&  <T!@Mۄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA8ۄ T&  <T!@8ۄPNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NAkۄ T&  <T!@kۄNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0NAۄ T&  <T!@ۄ  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA~܄ T&  <T!@~܄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NAџ܄ T&  <T!@џ܄NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllv**0NAz ܄ T&  <T!@z ܄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAl1݄ T&  <T!@l1݄NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NAǤO݄ T&  <T!@ǤO݄XNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvse**0NA3D~e݄ T&  <T!@3D~e݄ DNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllT&0**NAN݄ T&  <T!@N݄ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NA_݄ T&  <T!@_݄<NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll****0NANބ T&  <T!@Nބ @ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAބ T&  <T!@ބ@NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NA,sބ T&  <T!@,sބ|NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllF**0NAb/ބ T&  <T!@b/ބ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAJ߄ T&  <T!@J߄4 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**NAxh߄ T&  <T!@xh߄4NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllX**0NAi}߄ T&  <T!@i}߄  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA T&  <T!@ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**NA>f" T&  <T!@>f"p NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll, **0NAA0 T&  <T!@A0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA}  T&  <T!@}  NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**NA+ T&  <T!@+0tNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll****0NAޞ T&  <T!@ޞ NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAna T&  <T!@na0 4NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**NA} T&  <T!@}0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll|**0NA7l T&  <T!@7l0 NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA:  T&  <T!@: 0\@NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll$&**NA4 T&  <T!@40\NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dlloB**0NAV?I T&  <T!@V?I0 ` NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NAr T&  <T!@r0` NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllz_**NAU T&  <T!@U0` NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll+E**0NA T&  <T!@ xNAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**NA>z T&  <T!@>z NAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**OAB T&  <T!@B OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllA**0OA T&  <T!@ xOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**OA7,- T&  <T!@7,- OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllE=**OAlN T&  <T!@lN OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@p**0OARa T&  <T!@Ra  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll?B0**OAS T&  <T!@S (OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#**OA T&  <T!@ , OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**0OA T&  <T!@ h OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.]0**OAҪ2 T&  <T!@Ҫ2|OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll** OA. T&  <T!@. OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0 OAb T&  <T!@b L OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllT&0** OAQE T&  <T!@QE OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll** OAlcT T&  <T!@lcT< OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllll**0 OA5z T&  <T!@5z  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2<0**OA  T&  <T!@ x XOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dlll**OA; T&  <T!@;x OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllll**0OA' - T&  <T!@' - OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**OA*ڪ T&  <T!@*ڪhOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**OAr T&  <T!@rHOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0OAO T&  <T!@O pOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll"0**OA\^ T&  <T!@\^lOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dlll**OA߈| T&  <T!@߈|l(OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll****0OA( T&  <T!@( OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllT&0**OA/=  T&  <T!@/=  tOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**OAΏ T&  <T!@ΏT h OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllll**0OAŅE T&  <T!@ŅE  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllRcQ0**OA. T&  <T!@.30P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dlll**OAֈ T&  <T!@ֈ30P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllll**0OAGS T&  <T!@GS30 HOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllȝ&0**OAu T&  <T!@u30\ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**OAmܕ T&  <T!@mܕ30 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0OA) T&  <T!@)30  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllul0** OA3b) T&  <T!@3b)30| OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlll**!OAHH T&  <T!@HH30| !OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll****0"OA] T&  <T!@]  "OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllT&0**#OAL T&  <T!@L  t#OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**$OA@  T&  <T!@@   $OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0%OAi T&  <T!@i  %OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll&0**&OAo T&  <T!@o  l&OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**'OA/ T&  <T!@/  'OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**0(OA T&  <T!@  (OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllerat0 T& T&  <Tф@K p)OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000R  <TFational ElfChnk)OAOA)OAOA`p0-wL$=##$Wf#K ? $MF W$$"&0**)OAK T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@K p)OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t***OA` T&  <T!@` `*OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0+OA stv T&  <T!@ stv  d+OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMA0**,OAB  T&  <T!@B  pT ,OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll\ts**-OA;H T&  <T!@;H p4-OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllpro**0.OASKG) T&  <T!@SKG)  l .OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllNA0**/OAj됧 T&  <T!@j됧  /OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**0OA@ T&  <T!@@ | 0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllmiP**01OAŅ T&  <T!@Ņ  @ 1OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\ts0**2OA{t T&  <T!@{tP@02OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllll**3OAK. ! T&  <T!@K. !b9Gl^]`3OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllt.**4OA,+! T&  <T!@,+!b9Gl^]`4OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dlltemR**(5OA,+! T&  <T!@,+!225OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "Em>B3 ?+A"n g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI#[Id .#3 ClientMachine #_User 2$?ClientProcessId &W$} Component &$"g Operation ($J ResultCode .$xb PossibleCause N{40C1D1B9-565B-4E11-8614-BF9ACBBE19BA}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**6OA-! T&  <T!@-!22 6OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N{10F74791-6295-478E-8E8B-891A80ECD0E4}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownWM**7OA-! T&  <T!@-!22l7OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N{10112E9E-2297-4E2B-96D2-394F1EB5E951}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**8OA-! T&  <T!@-!22l8OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N{B90619D7-E5C1-4D65-9F17-A77C5C6419BF}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownro**9OA-! T&  <T!@-!22l9OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N{F43A84D1-AECE-41BB-92BB-6E94AFC9CEDC}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownm\**:OA-! T&  <T!@-!22<:OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N{DB3D1C93-F17E-45E2-A791-C0755D9464F3}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**;OAS2! T&  <T!@S2!22l;OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N{E0C896F6-32C4-4D36-8EBC-9A8AEDF40D7E}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**OA\C T&  <T!@\C22T>OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllWMI** ?OA,C T&  <T!@,C22P?OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllvit **@OA2Z T&  <T!@2Z22 @OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**AOAlg T&  <T!@lg22 AOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N({1B32E8B6-84EF-0000-EBE8-321BEF84DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2Unknown**BOA Ah T&  <T!@ Ah22DBOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N({1B32E8B6-84EF-0000-EBE8-321BEF84DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown**COA+Dh T&  <T!@+Dh22 COAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational "N({1B32E8B6-84EF-0000-00E9-321BEF84DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown2_**DOA^x T&  <T!@^x22 DOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0EOA{ˎ T&  <T!@{ˎ22PEOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliPer0**FOA  T&  <T!@ 22$ FOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**GOA+ T&  <T!@+22 GOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HOAA T&  <T!@A224 HOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliPer0**IOA T&  <T!@=! hIOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll32_**JOAu T&  <T!@u=! XJOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KOAn T&  <T!@n=!TKOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllt0**LOABr T&  <T!@Br=!,LOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_TE**MOA T&  <T!@=!MOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dll**NOAY T&  <T!@Y=!NOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0OOAA T&  <T!@A=!OOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlln32_0**POA& T&  <T!@&=!XLPOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**QOA͝oD T&  <T!@͝oD=!X QOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**0ROADZ T&  <T!@DZ=!ROAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**SOAa" T&  <T!@a"=!SOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**TOA[w# T&  <T!@[w#=! TOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0UOAQ  T&  <T!@Q =! UOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**VOA; T&  <T!@; | VOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**WOA0N T&  <T!@0N WOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0XOAH T&  <T!@HXOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**YOAg> T&  <T!@g>YOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dll**ZOAL T&  <T!@LZOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0[OA{dr T&  <T!@{dr [OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**\OA T&  <T!@ X \OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**]OA9 T&  <T!@9 ]OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0^OA T&  <T!@_> P@ uOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0vOA< T&  <T!@< P@ vOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**wOA9 T&  <T!@9 P@ wOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**xOA"Y T&  <T!@"Y P@xOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0yOA=n T&  <T!@=n0yOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**zOA;{ T&  <T!@;{0< zOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**{OA T&  <T!@P< {OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllona**0|OA ! T&  <T!@ !P| |OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**}OAj T&  <T!@jP\ }OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllp**~OAX# T&  <T!@X#P ~OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0OA!s T&  <T!@!sP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**OA}Q T&  <T!@}QPx OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll/Op**OA0vq T&  <T!@0vqPx 8OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0OAK T&  <T!@KP|OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**OA C T&  <T!@ CP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**OA\$ T&  <T!@\$P TOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0OA: T&  <T!@:P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**OA T&  <T!@PTtOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllona**OA4 T&  <T!@4PT0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllona**0OAA5 T&  <T!@A5P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**OA$& k T&  <T!@$& kP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllp**OAy T&  <T!@yPP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0OA T&  <T!@POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**OAb T&  <T!@bP8OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll/Op**OA{m< T&  <T!@{m< P@8OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0OA R T&  <T!@ R P@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**OAk$ T&  <T!@k$ P@TOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllona**OAWE T&  <T!@WE P@TlOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllona**0OAP[g T&  <T!@P[g P@p OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**OA. T&  <T!@. P@(\ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllona**OA1o T&  <T!@1o P@(OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllona**0OAE3: T&  <T!@E3: P@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**OAQ7 T&  <T!@Q7 P@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllp**OA>{F T&  <T!@>{F P@$ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0OA)k T&  <T!@)k P@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**OA5 T&  <T!@5 P@  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**OAպ  T&  <T!@պ  P@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Opational 000 T&  <Tvity/Operational ElfChnkOAPAOAPA(85UL=n WfK ? MF &0**OAE T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@E P@TOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**OA&c T&  <T!@&c P@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**OAS T&  <T!@S0 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMA**0OA T&  <T!@0 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**OAXGO T&  <T!@XGO0 4 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**OAm T&  <T!@miP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNA**0OA T&  <T!@iP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**OAF T&  <T!@FiP@P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dll**OAb T&  <T!@biP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0OA0]6 T&  <T!@0]6iP@x OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**OA7L T&  <T!@7LiP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**OAi T&  <T!@iiP@ 8 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0OA 0 T&  <T!@ 0iP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllCli0**OAf T&  <T!@fiP@L OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcM**OA< T&  <T!@<iP@p OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0OA T&  <T!@iP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**OAçS T&  <T!@çSiP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllang**OA9 T&  <T!@9iP@ T OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllPP-**0OA۸N T&  <T!@۸NiP@0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**OA O T&  <T!@ OiP@TOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dll**OA T&  <T!@iP@l lOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllT\M**0OA T&  <T!@iP@@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll6-320**OAj` T&  <T!@j`iP@( OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA} T&  <T!@}POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**OAI2  T&  <T!@I2 L XOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllty**OAQ  T&  <T!@Q L OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll#F**0OAPg  T&  <T!@Pg (OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**OA"  T&  <T!@" 0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**0OA{#  T&  <T!@{# OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**OATDU  T&  <T!@TDU OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllE**OAצ  T&  <T!@צ  ` OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0OAT  T&  <T!@T  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA!I  T&  <T!@!I | OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlloso**OAj  T&  <T!@j |L OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll FO**0OA+  T&  <T!@+ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAC5z  T&  <T!@C5z p | OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dlloso**OA=  T&  <T!@= p xOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllIO**0OA2  T&  <T!@2 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA*  T&  <T!@*  OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA!x  T&  <T!@!x POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllLO**0OA>q  T&  <T!@>q PHOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAPd  T&  <T!@Pd POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllo**OA=.s  T&  <T!@=.s P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAD  T&  <T!@D 80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA*h T&  <T!@*h80P OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA4S5 T&  <T!@4S580OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAK T&  <T!@K80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA\  T&  <T!@\ 80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**OAb T&  <T!@b80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA T&  <T!@80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA { T&  <T!@ {80 p OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**OA T&  <T!@80 pOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAc T&  <T!@c80OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAC{/ T&  <T!@C{/80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllo**OA> T&  <T!@>80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAbc T&  <T!@bc80 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA T&  <T!@80,$OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dlloso**OAH9 T&  <T!@H9P, OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAud T&  <T!@udPhOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA T&  <T!@POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OAs T&  <T!@sP0 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA7 T&  <T!@7PhOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAG T&  <T!@GPP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dlloso**OA$Df T&  <T!@$DfPP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAa | T&  <T!@a |POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OACq T&  <T!@CqP8OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllo**OATq  T&  <T!@Tq P(OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA. T&  <T!@.POAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAsڬ T&  <T!@sڬP XOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**OAF T&  <T!@FP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA T&  <T!@PP OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA`:e T&  <T!@`:eP|OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlloso**OAD~ T&  <T!@D~P|(OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAL T&  <T!@LP$ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAP T&  <T!@PPH OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA1 T&  <T!@1P@HOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA$XG T&  <T!@$XGP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAW T&  <T!@WP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllo**OAKW T&  <T!@KWP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA* T&  <T!@*P@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAfw T&  <T!@fwP@,OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA> T&  <T!@>&0XOAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA T&  <T!@&0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA@* T&  <T!@@*&0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA J T&  <T!@ J&0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA̬_ T&  <T!@̬_&0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA T&  <T!@&04OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OAY T&  <T!@Y&0@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA T&  <T!@&0H OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAj T&  <T!@j&0 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllo**OA= T&  <T!@=&0 OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA\v T&  <T!@\v&0(OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAC T&  <T!@C&0OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OAb T&  <T!@bP@,OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OA5Ix T&  <T!@5IxP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAߧa T&  <T!@ߧaP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA Q T&  <T!@ QP@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAo+ T&  <T!@o+P@OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OA T&  <T!@P@,OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**OA + T&  <T!@ +P@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0OAG T&  <T!@GP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**OAp T&  <T!@pP@ OAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe%systemroot%\system32\wbem\wmiprov.dllo**0PA T&  <T!@P@ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**PA\ T&  <T!@\P@ 8PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**PA& T&  <T!@&P@PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**PAt$ T&  <T!@t$P@ XPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0PA^z9 T&  <T!@^z9P@8PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**PAl)u T&  <T!@l)uP@hlPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dlloso**PA#н T&  <T!@#нP@THPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dlloso**0PAO T&  <T!@OP@PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**PA"`' T&  <T!@"`'0,< PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dlloso** PAnv T&  <T!@nv0  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0 PA5' T&  <T!@5'0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0** PA,u T&  <T!@,u0( PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo** PAO/< T&  <T!@O/<0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0 PAQ T&  <T!@Q0< PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**PA T&  <T!@0< XPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllndo-WMI-Activit T&  <Tra@v08 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000R  <Tvity/Operational ElfChnkPAPAPAPAh;{S=n WfK ? MF &0**PAv T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@v08 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**0PAŃ  T&  <T!@Ń 0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**PA?  T&  <T!@? 0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMA**PA$}6  T&  <T!@$}6 0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PA[  T&  <T!@[ 0TPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**PA;  T&  <T!@; 0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNA**PATPA5* T&  <T!@5* >PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllOA0**?PA* T&  <T!@*H ?PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllOA**@PAX++ T&  <T!@X++8 @PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0APA,1+ T&  <T!@,1+APAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllOA0**BPA^9k+ T&  <T!@^9k+BPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**CPAW+ T&  <T!@W+< TCPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0DPAS+ T&  <T!@S+DPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**EPA@S!, T&  <T!@@S!, EPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**FPA', T&  <T!@', FPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0GPAgz, T&  <T!@gz,TGPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HPAR`, T&  <T!@R`,THPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**IPA}*8- T&  <T!@}*8-H IPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dlloso**0JPARuJ- T&  <T!@RuJ- JPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KPA2u- T&  <T!@2u- KPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**LPAW- T&  <T!@W- LPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0MPA J- T&  <T!@ J-MPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**NPA##D7. T&  <T!@##D7.x NPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**OPA c. T&  <T!@ c.Pp OPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dlloso**0PPA. T&  <T!@.PPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QPA&. T&  <T!@&.P  QPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**RPAlM/ T&  <T!@lM/P RPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOA**0SPAb/ T&  <T!@b/PSPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**TPAY1/ T&  <T!@Y1/PT |TPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**UPA_60 T&  <T!@_60PDUPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0VPAP0 T&  <T!@P0P8VPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**WPAP0 T&  <T!@P0P lWPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**XPA0 T&  <T!@00 XPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOA**0YPAs0 T&  <T!@s00YPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ZPA_1 T&  <T!@_10ZPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**[PA)p f1 T&  <T!@)p f10| P[PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllOA**0\PAh{1 T&  <T!@h{10 \PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**]PA1 T&  <T!@10]PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**^PA 42 T&  <T!@ 420H T^PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**0_PA;.2 T&  <T!@;.20 _PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**`PAb]S2 T&  <T!@b]S20 `PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**aPAK#s2 T&  <T!@K#s2$ aPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0bPA%2 T&  <T!@%2$bPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**cPAr[3 T&  <T!@r[3$<cPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**dPAՄO~3 T&  <T!@ՄO~3$ dPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ePA3 T&  <T!@3$ ePAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**fPAz3 T&  <T!@z3$$fPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**gPA)14 T&  <T!@)14$8 gPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**0hPAF4 T&  <T!@F4$ hPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**iPAK4 T&  <T!@K4$ iPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**jPA4 T&  <T!@4$ jPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0kPA<4 T&  <T!@<4$kPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**lPA-35 T&  <T!@-35$8 \lPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**mPA_5 T&  <T!@_5$L mPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**0nPA8\5 T&  <T!@8\5$ nPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**oPAR`5 T&  <T!@R`5$ oPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**pPAljJ6 T&  <T!@ljJ6$pPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0qPA/_6 T&  <T!@/_6$qPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**rPA>6 T&  <T!@>6$XrPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**sPAM7 T&  <T!@M7'PsPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0tPA7 T&  <T!@7'P0 tPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**uPAZ7 T&  <T!@Z7'P uPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**vPA1]7 T&  <T!@1]7'PdvPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0wPAp#7 T&  <T!@p#7'PwPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**xPAD@7 T&  <T!@D@7'P xPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **yPAUnb8 T&  <T!@Unb80yPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0zPAdw8 T&  <T!@dw80zPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**{PA9n8 T&  <T!@9n80 L{PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **|PAt9 T&  <T!@t90t |PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll**0}PAw|*9 T&  <T!@w|*90}PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**~PA DPd9 T&  <T!@ DPd90, ~PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll **PA੷9 T&  <T!@੷90L PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0PAO9 T&  <T!@O90< PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**PA%: T&  <T!@%:0TPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **PAq{: T&  <T!@q{:0PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0PAփ": T&  <T!@փ":0TPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0<Tra T&  <Tnd@c:0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal ElfChnkPAPAPAPAؒn=n WfK ? MF &0**PAc: T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@c:0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**PA1B-; T&  <T!@1B-;0D \PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PA)C; T&  <T!@)C;P,PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMA0**PAͩ|; T&  <T!@ͩ|;PhPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll\ts**PAhiU; T&  <T!@hiU;P PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PA4; T&  <T!@4;P PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllNA0**PAf?< T&  <T!@f?<P PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**PA!< T&  <T!@!<P PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PAn< T&  <T!@n<PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllOA0**PACܮ< T&  <T!@Cܮ<PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**PAoE= T&  <T!@oE=PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PAڨr[= T&  <T!@ڨr[=PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllOA0**PAu= T&  <T!@u=P`, PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dlli.d**PAT= T&  <T!@T=P8< PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PAE> T&  <T!@E>P PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllOA0**PAѴ T&  <T!@ѴP 0PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**PAOgѺ> T&  <T!@OgѺ>PdPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PAH> T&  <T!@H>PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllOA0**PAv> T&  <T!@v>PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**PAO^? T&  <T!@O^?P PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PAs? T&  <T!@s? `PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**PAs? T&  <T!@s? PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll-32**PA\:@ T&  <T!@\:@ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0PA= &@ T&  <T!@= &@ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllI-A0**PAƾ`@ T&  <T!@ƾ`@ 8PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll(PA**PA^@ T&  <T!@^@ p x PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll)PA**0PAC@ T&  <T!@C@ PPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll*PA0**PA"A T&  <T!@"A PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll+PA**PA8{vA T&  <T!@8{vA PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll,PA**0PAfA T&  <T!@fA PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-PA0**PA0A T&  <T!@0A  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.PA**PANj)B T&  <T!@Nj)B 0 H PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll/PA**0PA\/4?B T&  <T!@\/4?B PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0PA0**PAxyB T&  <T!@xyB $ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll1PA**PAB T&  <T!@B D PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2PA**0PAi B T&  <T!@i B PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll3PA0**PA,C T&  <T!@,C 8PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll4PA**PA*WC T&  <T!@*WCP0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll5PA**0PAAܤC T&  <T!@AܤCP(PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll6PA0**PAC T&  <T!@CP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll7PA**PAsJD T&  <T!@sJDPpPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll8PA**0PAWD T&  <T!@WDPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll9PA0**PA9VD T&  <T!@9VDPt8PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll:PA**PAgD T&  <T!@gDP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll;PA**0PA{ E T&  <T!@{ EP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPA**0PA׎YE T&  <T!@׎YEP$PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll?PA0**PARF T&  <T!@RFP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@PA**PAUZF T&  <T!@UZFP\PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllAPA**0PA*pF T&  <T!@*pFPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllBPA0**PAF T&  <T!@FP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllCPA**PAYL G T&  <T!@YL GP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllDPA**0PA"G T&  <T!@"GP$ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllEPA0**PA\G T&  <T!@\GPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllFPA**PAP;-G T&  <T!@P;-GPh PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllGPA**0PAӴG T&  <T!@ӴG  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHPA0**PA,rH T&  <T!@,rH L PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllIPA**PAc''H T&  <T!@c''H $h PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllJPA**0PA򌢈H T&  <T!@򌢈H \PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllKPA0**PAoH T&  <T!@oH LdPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllLPA**PA&I T&  <T!@&I  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMPA**0PAw;I T&  <T!@w;I PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllNPA0**PA8uI T&  <T!@8uI $PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOPA**PAuI T&  <T!@uI LPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllPPA**0PAJI T&  <T!@JI PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllQPA0**PA<'J T&  <T!@<'J PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllRPA**PAߘJ T&  <T!@ߘJ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllSPA**0PA]<"J T&  <T!@]<"J  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllTPA0**PATJ T&  <T!@TJ PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllUPA**PA>K T&  <T!@>K PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVPA**0PAOSK T&  <T!@OSK  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWPA0**PAԷK T&  <T!@ԷK 0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllXPA**PA!K T&  <T!@!K 0| @PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllYPA**0PAL T&  <T!@LP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZPA0**PAyS@L T&  <T!@yS@LPPH PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll[PA**PApL T&  <T!@pLPdPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\PA**0PAqbL T&  <T!@qbLPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll]PA0**PA<3 L T&  <T!@<3 LP HPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll^PA**PAw1gM T&  <T!@w1gMP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_PA**0PAarlM T&  <T!@arlMPH PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll`PA0**PAo,M T&  <T!@o,MP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllaPA**PAd| N T&  <T!@d| NP@PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllbPA**0PAt@N T&  <T!@t@NP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcPA0**PAÐXN T&  <T!@ÐXNPp PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dlldPA**PAiN T&  <T!@iNPD | PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllePA**0PAN T&  <T!@NPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllfPA0**PA-D. O T&  <T!@-D. OPx PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllgPA**PARqO T&  <T!@RqOP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllhPA**0PA*%O T&  <T!@*%OPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliPA0**PA[O T&  <T!@[OPL PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlljPA**PA?P T&  <T!@?PP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllkPA**0PAbySP T&  <T!@bySPPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlllPA0**PAjWP T&  <T!@jWPP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmPA**PA+DP T&  <T!@+DPPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllnPA**PAӂP T&  <T!@ӂPPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0PA7P T&  <T!@7PP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllpPA0**PA0a$Q T&  <T!@0a$QPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllqPA**PANQ T&  <T!@NQP  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0PAu^Q T&  <T!@u^QP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsPA0**PAlQ T&  <T!@lQP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltPA**PA+ϷR T&  <T!@+ϷRP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**PA:R T&  <T!@:RPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0PA3PR T&  <T!@3PRP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwPA0**PAR T&  <T!@RPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**PAY~R T&  <T!@Y~RP PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0PAU" S T&  <T!@U" SPPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllzPA0**PA1!=S T&  <T!@1!=S%0x@PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dlli.d**PAS T&  <T!@S%0tPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0PAJ=S T&  <T!@J=S%00 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll}PA0**PAS T&  <T!@S%0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**(PA|S T&  <T!@|S%0PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000,TServerFeatureProviderwmiprvse.exe%windir%\system32\wbem\servercompprov.dll**(**HPAȵS T&  <T!@ȵS%0t PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exet %systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**PAxST T&  <T!@xSTxJ&,E^u |PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0PA hT T&  <T!@ hTxJ&,E^u  PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**PA|ϱT T&  <T!@|ϱTx PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**PADU T&  <T!@DUHpPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll& T&  <T0 PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal ElfChnkPAmQAPAmQAynR=n WfK ? MF &0**PA. U T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@. U PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**PAUU T&  <T!@UUx PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**PAlZU T&  <T!@lZU PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMA**0PA*OU T&  <T!@*OU PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**PAe{V T&  <T!@e{VdPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**PAkV T&  <T!@kV PAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNA**0PA$V T&  <T!@$VPAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAvV T&  <T!@vV L QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QA,-W T&  <T!@,-W@ ,QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAmn3W T&  <T!@mn3WQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA< nW T&  <T!@< nW QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QAbW T&  <T!@bW8QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAW T&  <T!@WQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAW[ X T&  <T!@W[ Xd QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**QAuU X T&  <T!@uU X`QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0QAR㟙X T&  <T!@R㟙XQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** QA̻X T&  <T!@̻XPDL QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll** QA7Y T&  <T!@7YP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllOA**0 QAirLY T&  <T!@irLYP QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** QA>kY T&  <T!@>kYP(  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll** QA3N9Y T&  <T!@3N9Y0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0QAV1CY T&  <T!@V1CY0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QABZ T&  <T!@BZ0 L QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QA nZ T&  <T!@ nZ0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0QAkZ T&  <T!@kZ0D QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA Z T&  <T!@ Z0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QA2>}O[ T&  <T!@2>}O[0l QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll*PA**0QACd[ T&  <T!@Cd[0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAR[ T&  <T!@R[0P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**QA< \ T&  <T!@< \0, PQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll-PA**0QAb~\ T&  <T!@b~\0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QAi-Q\ T&  <T!@i-Q\0`QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**QA.\ T&  <T!@.\0hQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll0PA**0QAuV\ T&  <T!@uV\0 QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA&] T&  <T!@&] P QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**QAyg] T&  <T!@yg] QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll3PA**0QABc}] T&  <T!@Bc}]  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**QA7] T&  <T!@7] QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QALO^ T&  <T!@LO^ 0QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll6PA**0 QA*60^ T&  <T!@*60^  QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**!QA~y^ T&  <T!@~y^ x| !QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**"QAx ^ T&  <T!@x ^  "QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll9PA**0#QA| ^ T&  <T!@| ^ \#QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$QA!_ T&  <T!@!_ $QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%QA_ T&  <T!@_ 0%QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllQAyd T&  <T!@ydP`>QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**?QAId T&  <T!@IdP?QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****@QAye T&  <T!@yeP P @QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllfgw**0AQAw,e T&  <T!@w,eP AQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**BQA$9fe T&  <T!@$9feX hBQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll****CQA!e T&  <T!@!ehCQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0DQA/Qe T&  <T!@/Qe DQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**EQA]f T&  <T!@]f, 8EQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll****FQA }f T&  <T!@ }f0X FQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0GQAf T&  <T!@f0 GQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**HQA,f T&  <T!@,f0(HQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll****IQA>01g T&  <T!@>01g0dIQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0JQAFbDg T&  <T!@FbDg0 JQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**KQA6eۉg T&  <T!@6eۉg0 \KQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****LQA ag T&  <T!@ ag0 LQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0MQA#g T&  <T!@#g0 MQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**NQAdAh T&  <T!@dAh0 NQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****OQAOh T&  <T!@Oh0P OQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0PQA^ךh T&  <T!@^ךh0T PQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**QQALh T&  <T!@Lh0<  QQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll****RQAJ5Gi T&  <T!@J5Gi0RQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0SQALk]i T&  <T!@Lk]i0SQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**TQAi T&  <T!@iP TQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll****UQAVi T&  <T!@Vi(UQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllfgw**0VQA@j T&  <T!@@jVQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**WQAE7Jj T&  <T!@E7Jj WQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****XQA>1j T&  <T!@>1jL XQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll****0YQAԚj T&  <T!@ԚjYQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**ZQAzj T&  <T!@zjlZQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll****[QARC`k T&  <T!@RC`k [QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0\QA~uk T&  <T!@~uk\QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**]QAMk T&  <T!@Mk ]QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****^QAl T&  <T!@l 8 ^QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0_QAj(l T&  <T!@j(l _QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**`QAbl T&  <T!@bl `QAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****aQAEl T&  <T!@El4H aQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll****0bQAl T&  <T!@lbQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**cQA $m T&  <T!@ $m cQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****dQA]Ѧxm T&  <T!@]Ѧxm dQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0eQA^m T&  <T!@^meQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**fQA0m T&  <T!@0mL fQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****gQA+n T&  <T!@+n gQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0hQA1An T&  <T!@1An$ hQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPA0**iQAӍzn T&  <T!@Ӎzn0HiQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllplo**jQA@n T&  <T!@@n0|jQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\**0kQAWpn T&  <T!@Wpn0 kQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltem30**lQA[q-o T&  <T!@[q-o0 lQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\**mQAwpo T&  <T!@wpo0mQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\iPerfInst.dl T&  <T@fHצo04nQAMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000000nal