ElfFileQGElfChnkGJGGJG(@6 =n WfK ? MF &0**G_mڠk T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Ta!@_mڠkZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllbG**Gck T&  <T!@ck PU-d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll****G(l T&  <T!@(l PU-GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GsES:l T&  <T!@sES:lZA_A_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GEBl T&  <T!@EBlZA_1A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllind**GRBl T&  <T!@RBlZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GqLCl T&  <T!@qLClZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dlln**GsGl T&  <T!@sGlZA_A_\ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe\ %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G9l T&  <T!@9lZA_PA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GMl T&  <T!@MlZA_žA_, GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GpTl T&  <T!@pTlZA_žA_PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**GIǝl T&  <T!@IǝlZA_jA_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**GZl T&  <T!@ZlZA_A_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G/l T&  <T!@/lZA_bA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GVMm T&  <T!@VMmZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GG5m T&  <T!@G5mZA_A_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G; m T&  <T!@; mZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**GFvm T&  <T!@FvmZA_A_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**Gm T&  <T!@mZA_RA_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gg m T&  <T!@g mZA_A_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe4 %SYSTEMROOT%\System32\wbem\dnsclientcim.dllق**G n T&  <T!@ nZA_A_h dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**0Gid>n T&  <T!@id>nZA_-A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GXB@n T&  <T!@XB@nZA_-A_H LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**GZn T&  <T!@ZnZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**G0[n T&  <T!@0[nZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GWp[n T&  <T!@Wp[nZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G_n T&  <T!@_nZA_,A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**Gn T&  <T!@nZA_pA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&\**0GU4n T&  <T!@U4nZA_rA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Gqn T&  <T!@qnZA_rA_D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**GB5o T&  <T!@B5oZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**GFVo T&  <T!@FVoZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Go T&  <T!@oZA_-A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlll**G_o T&  <T!@_oZA_A_4\ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**0Go T&  <T!@oZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G`Ko T&  <T!@`KoZA_A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Gj+o T&  <T!@j+oZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**G0 o T&  <T!@0 oZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gt.o T&  <T!@t.oZA_ A_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe8%SYSTEMROOT%\System32\wbem\dnsclientcim.dll/**Gyp T&  <T!@ypZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GGMVp T&  <T!@GMVpGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G.Ghp T&  <T!@.GhpZA_A_P GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**GڝAsp T&  <T!@ڝAspZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**Gksp T&  <T!@kspZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GJsp T&  <T!@JspZA_fA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**GA[>wp T&  <T!@A[>wpZA_)A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll&**GZp T&  <T!@ZpZA_NA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GT q T&  <T!@T qZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G3 q T&  <T!@3 qZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**G(q T&  <T!@(qZA_YA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**GK7)q T&  <T!@K7)qZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gk)q T&  <T!@k)qZA_~A_t X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exet %SYSTEMROOT%\System32\wbem\dnsclientcim.dll_** G}q T&  <T!@}qZA_A_P GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0 Gwq T&  <T!@wqZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** Gq T&  <T!@qZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** G}q T&  <T!@}qZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&** GSq T&  <T!@SqZA_bA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gc[q T&  <T!@c[qZA_A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllvX9**G+r T&  <T!@+rZA_CA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GJor T&  <T!@JorZA_LA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GZqr T&  <T!@ZqrZA_LA_ \ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**GM|r T&  <T!@M|rZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**G6r T&  <T!@6rZA__A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gr T&  <T!@rZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G,"r T&  <T!@,"rZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll&**Gr T&  <T!@rZA_A_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0G\"s T&  <T!@\"sZA__A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GT$s T&  <T!@T$sZA__A_H  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**G&]Cs T&  <T!@&]CsZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**GSNCs T&  <T!@SNCsZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GKCs T&  <T!@KCsZA_A_$l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe$%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**Gs T&  <T!@sZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllE**0Gs T&  <T!@sZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G {ts T&  <T!@ {tsZA_A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0GDs T&  <T!@DsZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** G's T&  <T!@'sZA_fA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**!GCLs T&  <T!@CLsZA_|A_!GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**"Gs T&  <T!@sZA_A_x "GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exex%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**#GIt T&  <T!@ItZA_(A_@#GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0$Gvzt T&  <T!@vzth $GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%GCEt T&  <T!@CEth T%GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**&G֞t T&  <T!@֞tZA_A_&GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**'Gb t T&  <T!@b tZA_A_'GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**(GMpit T&  <T!@MpitZA_A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**)G⇩t T&  <T!@⇩tZA_A_| )GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll***Gwgt T&  <T!@wgtZA_FA_` *GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**0+Gj:u T&  <T!@j:uZA_A_+GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**,G~Lu T&  <T!@~LuZA_A_@ ,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0-G|4Pu T&  <T!@|4PuZA_A_4-GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**.Ga^u T&  <T!@a^uZA_A_T .GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**/G ^u T&  <T!@ ^uZA_'A_T /GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**0G%_u T&  <T!@%_uZA_8A_ 0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**1Gܪu T&  <T!@ܪuZA_XA_01GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**02G~Zu T&  <T!@~ZuZA_A_ 2GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**3Gcu T&  <T!@cuZA_A_ 3GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**4Gt]v T&  <T!@t]vZA_A_44GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**5G;v T&  <T!@;vZA_A_45GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**6Gov T&  <T!@ovZA_A_<T 6GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe<%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**7G=ev T&  <T!@=evZA_9A_ | 7GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**08G#)v T&  <T!@#)vZA_A_ 8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**9G߶v T&  <T!@߶vZA_A_D9GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**0:G?v T&  <T!@?vZA_A_:GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**;G kv T&  <T!@ kvZA_hA_4;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllT**G6v T&  <T!@6vZA_A_T >GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeT %SYSTEMROOT%\System32\wbem\dnsclientcim.dllT**?Gw T&  <T!@wZA_pA_ ?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@G9Rw T&  <T!@9RwZA_sA_H@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**AGRUw T&  <T!@RUwZA_sA_ < AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT**BG#rw T&  <T!@#rwZA_)A_BGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**CG%rw T&  <T!@%rwZA_A_CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**DGJsw T&  <T!@JswZA_1A_  DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**EGQ1w T&  <T!@Q1wZA_DA_DEGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0FG x T&  <T!@ xZA_A_FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**GGQ\x T&  <T!@Q\xZA_A_ GGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**HGuK%x T&  <T!@uK%xZA_A_ HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**IGI%x T&  <T!@I%xZA_A_ IGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**JG&x T&  <T!@&xZA_SA_< D JGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe< %SYSTEMROOT%\System32\wbem\dnsclientcim.dll <To T&  <TWindows-WMI-Activity/Operational 000nal ElfChnkKGGKGG2[=n WfK ? MF &0**KG7F|x T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@7F|xPU-(KGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllll**0LGQx T&  <T!@QxZA_A_P LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll(0**MG1%x T&  <T!@1%xZA_A_ MGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsES:**NG x T&  <T!@ xZA_ A_ NGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlli.d**OGl# x T&  <T!@l# xZA_lA_ OGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlld**PG^jx T&  <T!@^jxZA_A_ PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**QGx T&  <T!@xZA_A_ QGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlln**RGG'y T&  <T!@G'yZA_>A_ RGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0SGkky T&  <T!@kkyZA_sA_l SGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllM0**TGT)my T&  <T!@T)myZA_sA_ TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**UG 2y T&  <T!@ 2yZA_: A_ UGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**VGVy T&  <T!@VyZA_ A_ VGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**WGxmƑy T&  <T!@xmƑyZA_A_H WGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**XG5y T&  <T!@5yZA_ A_|HXGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllll**0YG;z T&  <T!@;zZA_Q A_ YGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG50**ZG/z T&  <T!@/zZA_Q A_ ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**[GV@Dz T&  <T!@V@DzZA_ A_8 [GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**\Gc$Dz T&  <T!@c$DzZA_A_8 \GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**]GDz T&  <T!@DzZA_ A_ ]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**^GCz T&  <T!@CzZA_ A_` ^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllll**0_G'z T&  <T!@'zZA_A_ _GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllid>0**`Gz T&  <T!@zZA_A_x `GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dlll**aGQMz T&  <T!@QMzZA_Z A_8 aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**bGz T&  <T!@zZA_ A_8 bGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**cG2Oz T&  <T!@2OzZA_A_8 cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**dG{ T&  <T!@{ZA_A_( L dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe( %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**eG!E{ T&  <T!@!E{ZA_A_ 8eGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**fGf{ T&  <T!@f{ZA_A_,fGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0gG,5{ T&  <T!@,5{ZA_A_ gGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**hG&{ T&  <T!@&{ZA_A_hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**iG{ T&  <T!@{ZA_kA_iGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**jG'{ T&  <T!@'{ZA_VA_ L jGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**kGE{{ T&  <T!@E{{ZA_A_t8 kGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllll**lG"F9| T&  <T!@"F9|ZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0mG@K| T&  <T!@@K|ZA_A_ mGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**nG=qWu| T&  <T!@=qWu|ZA_eA_ nGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**oGR{u| T&  <T!@R{u|ZA_A_ oGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**pGu| T&  <T!@u|ZA_pA_l pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exel %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**qGչ| T&  <T!@չ| qGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**rG!| T&  <T!@!|X rGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0sGWq| T&  <T!@Wq| sGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**tGʪd} T&  <T!@ʪd}ZA_A_0tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**uGJ} T&  <T!@J}ZA_A_0uGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**vGǂ} T&  <T!@ǂ}ZA_*A_0vGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**wG:} T&  <T!@:}ZA_RA_(< wGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe(%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**xGmY} T&  <T!@mY}ZA_A_ xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**yG؞} T&  <T!@؞}ZA_A_8 4yGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllll**0zGu} T&  <T!@u}ZA_A_ zGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**{G7} T&  <T!@7}ZA_eA_0{GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**|G[} T&  <T!@[}ZA_FA_0|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**}GA } T&  <T!@A }ZA_A_ ( }GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**~Gp~ T&  <T!@p~ZA_A_ ~GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**GQ~ T&  <T!@Q~ZA_A_` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllll**0Gqc~ T&  <T!@qc~ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**GCS ~ T&  <T!@CS ~ZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**G,+~ T&  <T!@,+~ZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G 圀~ T&  <T!@ 圀~ZA_EA_( d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe( %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G*b~ T&  <T!@*b~ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**GFdc T&  <T!@FdcZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0GvB T&  <T!@vBZA_A_\ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**G+ T&  <T!@+ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**G>, T&  <T!@>,ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G_, T&  <T!@_,ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**GR^3 T&  <T!@R^3ZA_!A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G [v T&  <T!@ [vZA_/"A_h0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllll**GJ T&  <T!@JZA_/"A_ < GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**0G  T&  <T!@ ZA_/"A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**G5 T&  <T!@5ZA_2#A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**G: T&  <T!@:ZA_j#A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GM T&  <T!@MZA_#A_p 0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exep %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G6$ T&  <T!@6$ZA_A_T  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllll**GXj T&  <T!@XjZA_A_8 xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllll**0GKa{ T&  <T!@Ka{ZA_A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**Gꗀ T&  <T!@ꗀZA_?A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**G T&  <T!@ZA_%A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll3**G~} T&  <T!@~}ZA_A_ptGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exep%SYSTEMROOT%\System32\wbem\dnsclientcim.dlltTC**G3ۀ T&  <T!@3ۀZA_&A_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dlletA**G T&  <T!@ (GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllm\d**0G. T&  <T!@.GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**G$%D T&  <T!@$%DZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllsys**GJD T&  <T!@JDZA_@(A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll\**GPȨD T&  <T!@PȨDZA_(A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllC**GA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G4; T&  <T!@4;ZA_>A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G* T&  <T!@*ZA_?A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlli.d**Gd  T&  <T!@d ZA_?A_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllst.**G¢:f T&  <T!@¢:fZA_?A_ 0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**0G*x T&  <T!@*xZA_?A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll]G0**G@& T&  <T!@@&ZA_@A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GU T&  <T!@UZA_ AA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G T&  <T!@ZA_A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dlld**GQ T&  <T!@QZA_DA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllll**GU؇ T&  <T!@U؇ZA_A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**G T&  <T!@ZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll.dl**0G* T&  <T!@*ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldG0**0G ^ T&  <T!@ ^ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**GYh T&  <T!@YhZA_EA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Ge|h T&  <T!@e|hZA_FA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gh T&  <T!@hZA_FA_d 8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exed %SYSTEMROOT%\System32\wbem\dnsclientcim.dllhG**Gᨅ T&  <T!@ᨅZA_FA_, 8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**Gڈ T&  <T!@ڈZA_FA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlljG**0G;T݈ T&  <T!@;T݈ZA_FA_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**0GZ T&  <T!@ZZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G,. T&  <T!@,.ZA_GA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G2P T&  <T!@2PZA_vHA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gd T&  <T!@dZA_9IA_,<GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe,%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G\s> T&  <T!@\s>ZA_IA_80GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**Gk~ T&  <T!@k~`GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0Gu T&  <T!@u0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G T&  <T!@ZA_kJA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Gd㽉 T&  <T!@d㽉ZA_JA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GA T&  <T!@AZA_@KA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G!5oÉ T&  <T!@!5oÉZA_LA_ ,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G^C T&  <T!@^CZA_ A_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**G}z1 T&  <T!@}z1ZA_ A_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll&**0G7sFC T&  <T!@7sFCZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GEW)u T&  <T!@EW)uZA_kNA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GԋLu T&  <T!@ԋLuZA_z A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gݱu T&  <T!@ݱuZA_OA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G&= T&  <T!@&=ZA_PA_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**GI T&  <T!@IZA_PA_8 X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll&**0G+: T&  <T!@+:ZA_PA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G$( T&  <T!@$(ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GB+( T&  <T!@B+(ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gc( T&  <T!@c(ZA_ A_l hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exel %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GB6) T&  <T!@B6)ZA_LRA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dll**HGD, T&  <T!@D,ZA_ A_ hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exe %systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**GU>, T&  <T!@U>,ZA_ A_<GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9Em>B3 ?+A`n g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .63 ClientMachine k_User 2?ClientProcessId &ǂ} Component &`g Operation (!J ResultCode .Pxb PossibleCause N({41D4975A-F95F-0000-DA99-D4415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEM UnknownStart IWbemServices::ExecQuery - Root\CIMv2 : SELECT * FROM Win32_TSIssuedLicense WHERE LicenseStatus=0 AND KeyPackType=0UnknownVIC**8GU>, T&  <T!@U>,ZA_ A_<GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0000-DA99-D4415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEM UnknownStart IWbemServices::ExecQuery - Root\CIMv2 : SELECT * FROM Win32_TSIssuedLicense WHERE LicenseStatus=0 AND KeyPackType=1Unknown8**G!@, T&  <T!@!@,ZA_ A_<GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-3022-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEM UnknownStart IWbemServices::ExecQuery - Root\CIMv2 : select * from Win32_TSLicenseKeyPackUnknownhedu**0G3X T&  <T!@3XZA_RA_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmi0**GgqI֋ T&  <T!@gqI֋ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllIns**G]#n֋ T&  <T!@]#n֋ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G/֋ T&  <T!@/֋ZA_F A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllN**G> T&  <T!@>ZA_VA_x GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlltcp**Gb T&  <T!@bZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllda**G T&  <T!@ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dll**0Gsm T&  <T!@smZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliPer0**GM T&  <T!@MZA_WA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllPer**G^>  T&  <T!@^> ZA_0"A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-9C37-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '0'2Unknown**G^A  T&  <T!@^A ZA_SA_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-3022-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '4'2Unknownrat**G[D  T&  <T!@[D ZA_SA_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-F753-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '204'2Unknown** GvE  T&  <T!@vE ZA_SA_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-F753-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '316'2Unknownn** GG  T&  <T!@G ZA_7A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-F753-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '420'2Unknownw** G[;J  T&  <T!@[;J ZA_7A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 9N({41D4975A-F95F-0001-3022-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '504'2UnknownA** G$ T&  <T!@$ZA_7A_< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0 G8뎌 T&  <T!@8뎌ZA_WA_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllity0**G  T&  <T!@ ZA_WA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dlltiv**G;1 T&  <T!@;1ZA_|XA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllI-A**G R T&  <T!@ RZA_XA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllv**Gȫ T&  <T!@ȫZA_YYA_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeT%SYSTEMROOT%\System32\wbem\dnsclientcim.dllndo**0Gk T&  <T!@kZA_YA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**G^ T&  <T!@^ZA_YA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dllty**0Gp' T&  <T!@p'ZA_kA_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**0GA T&  <T!@AZA_BZA_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**GPtS T&  <T!@PtSZA_BZA_T| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllWMI**Gz^ T&  <T!@z^ZA_ZA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**G%#^ T&  <T!@%#^ZA_ZA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**G^ T&  <T!@^ZA_h[A_ 0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dlloft**G'u T&  <T!@'uZA_A_T| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllcro**0Go T&  <T!@oGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**GAi T&  <T!@AiZA_LA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**Gl T&  <T!@lZA_z\A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**G T&  <T!@ZA_\A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dlln**GE T&  <T!@EZA_YA_, GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dlloft**0 G  T&  <T!@ ZA_]A_L GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**!GӞ" T&  <T!@Ӟ"ZA_aA_@ !GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe@%SYSTEMROOT%\System32\wbem\dnsclientcim.dllWMI**"Go{Ǝ T&  <T!@o{ƎZA_2aA_ ` "GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0#G$Ȏ T&  <T!@$ȎZA_2aA_#GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**$G3UԎ T&  <T!@3UԎZA_TbA_$GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**%G|yԎ T&  <T!@|yԎZA_ A_%GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**&GߕԎ T&  <T!@ߕԎZA_A_L &GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeL%SYSTEMROOT%\System32\wbem\dnsclientcim.dllAct**'Gji T&  <T!@jiZA_XcA_d'GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0(GP{ T&  <T!@P{ZA_XcA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**)G)& T&  <T!@)&ZA_dA_)GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll/Op***GH T&  <T!@HZA_WeA_*GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllI**+G= T&  <T!@=ZA_A_0+GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllvit**,G8 T&  <T!@8ZA_ fA_d< ,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllAct**-Gi% T&  <T!@i%ZA_fA_-GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**.G & T&  <T!@ &ZA_fA_.GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllI**/G3in& T&  <T!@3in&ZA_A_/GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllt**00Gw`. T&  <T!@w`.ZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Act0ity/Operatio T&  <T@`/ZA_iA_D1GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000X <TWindows-WMI-Activity/Operational 000nal ElfChnk1GG1GG0@x6n=n WfK ? MF &0**1G`/ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Ta!@`/ZA_iA_D1GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath Xdnsclientcimwmiprvse.exeD%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**02G;ҿ T&  <T!@;ҿZA_iA_2GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#Qx0**3GPА T&  <T!@PАZA_iA_ 3GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**4G# T&  <T!@#ZA_0jA_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****5Gc T&  <T!@cZA_A_5GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**6G=# T&  <T!@=#ZA_kA_ 6GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dlll**7Giw T&  <T!@iwZA_mA_7GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dll.**08G8r T&  <T!@8rZA_mA_8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**9GԚ T&  <T!@ԚZA_mA_@9GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**:Gc[ T&  <T!@c[ZA_nA_H :GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**;G~ T&  <T!@~ZA_A_H ;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G5 T&  <T!@5ZA_fpA_X >GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll****?GU> T&  <T!@U>ZA_pA_?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**@G> T&  <T!@>ZA_aqA_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll.**AGC? T&  <T!@C?ZA_A_AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**BG"S T&  <T!@"SZA_KA_X BGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllfgw**CGho_ T&  <T!@ho_ZA_V!A_h ` CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeh %SYSTEMROOT%\System32\wbem\dnsclientcim.dllll**DGM T&  <T!@MZA_MuA_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrCi**0EG,t T&  <T!@,tZA_MuA_EGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**FG.a T&  <T!@.aZA_!A_FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**GGA! T&  <T!@A!ZA_qvA_xGGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**HG|D T&  <T!@|DZA_."A_xHGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlll**IG T&  <T!@ZA_"A_ h IGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllfgw**JGg T&  <T!@gZA_dwA_XH JGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllot%**0KG~3 T&  <T!@~3ZA_dwA_t KGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPIP.0**LGSu T&  <T!@SuZA_"A_XH LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllapt**MGÓ T&  <T!@ÓZA_xA_xMGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllm\d**NG}ē T&  <T!@}ēZA_#A_xNGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllP**OG%Yē T&  <T!@%YēZA_$A_ OGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllrfI**PGFd\ T&  <T!@Fd\ZA_C$A_ PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllot%**0QGK Y_ T&  <T!@K Y_ZA_C$A_L QGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloot%0**RGJe T&  <T!@JeZA_$A_0RGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllsys**SG f T&  <T!@ fZA_ %A_0SGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**TGzlf T&  <T!@zlfZA_2%A_0TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll3**UGn T&  <T!@nZA_|A_P UGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeP %SYSTEMROOT%\System32\wbem\dnsclientcim.dll2\w**VG=q T&  <T!@=qZA_*|A_P8 VGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll2\w**WGڟ T&  <T!@ڟZA_|A_L WGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dlls**0XG_* T&  <T!@_*ZA_W(A_0XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**YG T&  <T!@ZA__(A_P8 YGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll\sy**ZGf  T&  <T!@f ZA_X~A_L ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll%SY**[GP  T&  <T!@P ZA_(A_L [GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllR**\Gp! T&  <T!@p!ZA_~A_\ \GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlldow**]G- T&  <T!@-ZA_>A_d ]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dlldow**0^Gĕ T&  <T!@ĕZA_>A_^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**_G'=ӕ T&  <T!@'=ӕZA_SA_L _GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllemr**`G<]aӕ T&  <T!@<]aӕZA_A_L `GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**aG-Xӕ T&  <T!@-XӕZA_*A_ aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllOT%**bGf T&  <T!@f( bGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlldow**0cG|w T&  <T!@|wZA_*A_cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbem\0**dGY$~ T&  <T!@Y$~ZA_A_L dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**eG~ T&  <T!@~ZA_A_L eGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll%**fG1 T&  <T!@ޙ>1ZA_4A_x xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll0"**0yGSE T&  <T!@SEZA_4A_|yGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWher0**zG-S T&  <T!@-SZA_A_|zGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll5FF**{GtS T&  <T!@tSZA_A_x {GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllt-W**|G T T&  <T!@ TZA_A_||GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll2**}G{T T&  <T!@{TZA_N6A_ }GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllT A**~Gi T&  <T!@iZA_6A_$~GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe$%systemroot%\system32\wbem\wmiprov.dllv**G T&  <T!@ZA_6A_dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllnow**0G[- T&  <T!@[-ZA_6A_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllknow0**G T&  <T!@ZA_ߏA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**GJ T&  <T!@JZA_pA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllI**G7U T&  <T!@7UZA_7A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlloft**G@ T&  <T!@@d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dlloft**0G⫨ T&  <T!@⫨ZA_ˑA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**GY T&  <T!@YZA_7A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWMI**GC( T&  <T!@C(ZA_iA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllI**G<酯 T&  <T!@<酯ZA_N8A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllt**Gs% T&  <T!@s%ZA_A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeL%SYSTEMROOT%\System32\wbem\dnsclientcim.dllWin**GƶI T&  <T!@ƶIZA_5A_ $ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0G}[ T&  <T!@}[ZA_5A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**G,e T&  <T!@,eZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**Ge T&  <T!@eZA_XA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllM**GMkf T&  <T!@MkfZA_B:A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll{M**G4 T&  <T!@4ZA_)A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0G3O T&  <T!@3OZA_)A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**G T&  <T!@ZA_CA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**G T&  <T!@ZA_՘A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllM**G/D T&  <T!@/DZA_;A_x 8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exex %SYSTEMROOT%\System32\wbem\dnsclientcim.dll{M**G6 T&  <T!@6ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0G~8 T&  <T!@~8ZA_7ʲ T&  <T!@>7ʲZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll,**G<_- T&  <T!@<_-ZA_FA_0 DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll=G**0G~0? T&  <T!@~0?ZA_FA_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll>G0**GZd T&  <T!@ZdZA_(GA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****Ge T&  <T!@eZA_A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll>**G`e T&  <T!@`eZA_IA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllC?**Gʏ0 T&  <T!@ʏ0ZA_A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllBG**0G T&  <T!@ZA_A_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G p T&  <T!@ pZA_GA_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**G  T&  <T!@ ZA_̬A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GS  T&  <T!@S ZA_IA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G) T&  <T!@)ZA_A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**Grd T&  <T!@rdZA_IA_ d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G]i(4 T&  <T!@]i(4ZA_MA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G [ T&  <T!@ [ZA_6A_x GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllg**0GϤ T&  <T!@ϤZA_6A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0G*ʡ T&  <T!@*ʡZA_A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G T&  <T!@ZA_iA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G0 T&  <T!@0ZA_ʹA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gy T&  <T!@yZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GT T&  <T!@TZA_ŵA_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0GW T&  <T!@WZA_ŵA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0G} T&  <T!@}ZA_NA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Gس T&  <T!@سZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Gט T&  <T!@טZA_8A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GrH T&  <T!@rHZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GI T&  <T!@I  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0G;j  T&  <T!@;j   GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**G6 T&  <T!@6  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0GBL0 T&  <T!@BL0ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GOKV= T&  <T!@OKV=ZA_PA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll!**Gz= T&  <T!@z=ZA_PA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G\= T&  <T!@\=ZA_+A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G^ T&  <T!@^ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll@**GZo T&  <T!@ZoZA_RA_40 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll@**0GѪ> T&  <T!@Ѫ>ZA_RA_` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@'0**Gzʣ T&  <T!@zʣZA_RA_40 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllZ**0G+ T&  <T!@+ZA_RA_` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlla0**G T&  <T!@ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G T&  <T!@ZA_)A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G0a T&  <T!@0aZA_YA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll@Y$**Gr@^ T&  <T!@r@^ZA_A_p dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllZ**0G#p T&  <T!@#pZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllL f0**0GB湤 T&  <T!@B湤ZA_TA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**GBə¤ T&  <T!@Bə¤ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Gн¤ T&  <T!@н¤ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G2ä T&  <T!@2äZA_?VA_ @ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G T&  <T!@ZA_[A_d  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllk**0GO7" T&  <T!@O7"ZA_[A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**GMc T&  <T!@McZA_VA_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Gd T&  <T!@dZA_VA_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gbd T&  <T!@bdZA_WA_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**Gfgn T&  <T!@fgnZA_BXA_ll GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exel%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G0å T&  <T!@0åZA_XA_,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllq**0GzЬե T&  <T!@zЬեZA_XA_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**0GZB T&  <T!@ZBZA_-A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllws-W0**Gw  T&  <T!@w ZA_A_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G*?  T&  <T!@*? ZA_MYA_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**G܂  T&  <T!@܂ ZA_YA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe4%SYSTEMROOT%\System32\wbem\dnsclientcim.dlloso**Gv T&  <T!@vZA_sZA_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMic**0GY| T&  <T!@Y|ZA_sZA_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**G8 T&  <T!@8ZA_sZA_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0G^ T&  <T!@^ZA_yZA_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**GҦ T&  <T!@ҦZA_dA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllndo**GגӦ T&  <T!@גӦZA_A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllW**G(Ӧ T&  <T!@(ӦZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exex%SYSTEMROOT%\System32\wbem\dnsclientcim.dlls-W**G ) T&  <T!@ ) GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0G?/M; T&  <T!@?/M;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**G]C T&  <T!@]C GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0G?`a T&  <T!@?`aZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**GNo| T&  <T!@No|ZA_A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**GO| T&  <T!@O|ZA_X\A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllM**Go1| T&  <T!@o1|ZA_A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllM**G0# T&  <T!@0#ZA_WA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllcro**G+ T&  <T!@+ZA_]A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dlltiv**0G?B T&  <T!@?BZA_]A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**0G 1 T&  <T!@ 1ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**GI3 T&  <T!@I3ZA_C^A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWin**G4 T&  <T!@4ZA_s^A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlln**Gsp4 T&  <T!@sp4ZA_aA_D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllows**GP% T&  <T!@P%ZA_rA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll{M**0G_  T&  <T!@_ ZA_rA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**0G.Ǩ T&  <T!@.ǨZA__A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**Gn T&  <T!@nZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllAct**G/ T&  <T!@/ZA_VA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**G4 T&  <T!@4ZA__A_@HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe@%SYSTEMROOT%\System32\wbem\dnsclientcim.dllows**0Gꉮ? T&  <T!@ꉮ?ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**G A T&  <T!@ AZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0 G7S T&  <T!@7SZA_A_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**0 GGy T&  <T!@GyZA__A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllFWi0** GAĔ T&  <T!@AĔZA_'aA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllona** G;c T&  <T!@;cZA_aA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll** GR T&  <T!@RZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**Glx T&  <T!@lxZA_A_\dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe\%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G d T&  <T!@ dZA_hA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**0GF T&  <T!@FZA_hA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**0GuP T&  <T!@uPZA_fA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllFWi0**G4)m T&  <T!@4)mZA_A_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllona**GQZm T&  <T!@QZmZA__A_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gm T&  <T!@mZA_egA_lTGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exel%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**Gw T&  <T!@wZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**0Gz^ T&  <T!@z^ZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllFWi0**0G;4P T&  <T!@;4PZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllFWi0**G4F  T&  <T!@4F ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllona**G2  T&  <T!@2 ZA_SA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G  T&  <T!@ ZA_A_ P GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GvUc T&  <T!@vUc |GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00R T&  <Tte@ s.lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000000nal ElfChnkGGGGjq=n WfK ? MF &0**G s.l T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@ s.lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll;ҿ**0G  T&  <T!@ ZA_pA_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Gë T&  <T!@ëZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GC?ë T&  <T!@C?ëZA_iA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll** GSë T&  <T!@SëZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**!Ge˫ T&  <T!@e˫ZA_Gurخ T&  <T!@urخZA_sA_>GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0?G^@ T&  <T!@^@ZA_sA_D?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@Gz T&  <T!@zZA_sA_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0AG.4 T&  <T!@.4ZA_A_0AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BG {D T&  <T!@ {DZA_A_| BGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**CGһD T&  <T!@һDZA_]A_| CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**DG!E T&  <T!@!EZA_tA_, DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe,%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**EGWk@ T&  <T!@Wk@ZA_uA_ EGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0FG T&  <T!@, FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GGV T&  <T!@V GGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0HG T&  <T!@ZA_.A_@HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**IGsV T&  <T!@sVZA_uA_| IGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**JGRz T&  <T!@RzZA_3vA_| JGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**KGV T&  <T!@VZA_zvA_| KGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**LG  T&  <T!@ ZA_wA_, 4LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe, %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**MG0 M T&  <T!@0 MZA_%A_4MGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**0NGO T&  <T!@OZA_%A_ NGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0OGm T&  <T!@mZA_yA_TOGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**PGgK T&  <T!@gKZA_c T&  <T!@>cZA_[|A_xYGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**ZGY T&  <T!@YZA_A_ ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0[G5 T&  <T!@5ZA_A_T[GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**\G%Ʊ T&  <T!@%ƱZA_A_ \GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0]G.[ T&  <T!@.[ZA_A_]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**^GO  T&  <T!@O ZA_A_0^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**_Gdq  T&  <T!@dq ZA_}A_0_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**`GM  T&  <T!@M ZA_6A_0`GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**aG5 T&  <T!@5ZA_A_p$ aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exep%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**bG-V T&  <T!@-VZA_A_bGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0cGFOh T&  <T!@FOhZA_A_l cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**dGr T&  <T!@rZA_A_8 dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0eG ղ T&  <T!@ ղZA_A_TeGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**fG`o T&  <T!@`oZA_*A_fGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**gG@` T&  <T!@@`ZA_8A_gGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**hGƦ  T&  <T!@Ʀ ZA_xA_hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**iG3 T&  <T!@3ZA_A_L iGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll**0jG  T&  <T!@ ZA_A_jGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0kGRLj T&  <T!@RLjZA_A_8 kGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**lG? T&  <T!@?ZA_]A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**mGsYe T&  <T!@sYeZA_^A_mGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**nG ޚ T&  <T!@ ޚZA_A_LnGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeL%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**oGg" T&  <T!@g"ZA__A_ oGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0pGf*ͳ T&  <T!@f*ͳ  pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**qGYֳ T&  <T!@Yֳ qGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**rG,3 T&  <T!@,3ZA_ڃA_rGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**sG}b3 T&  <T!@}b3ZA_lA_sGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**tGiY4 T&  <T!@iY4ZA_A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**uGs? T&  <T!@s?ZA_A_h uGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeh%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**vGZw T&  <T!@ZwZA_A_4vGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0wG?À T&  <T!@?ÀZA_A_wGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0xGʴ T&  <T!@ʴZA_eA_ xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**yG T&  <T!@ZA_A_yGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**zGDd T&  <T!@DdZA_A_zGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**{Gϊo T&  <T!@ϊoZA_XA_, {GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe,%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**|G2! T&  <T!@2!ZA_A_$ |GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllG**0}G3 T&  <T!@3ZA_A_ }GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**~G9&; T&  <T!@9&;ZA_A_$ ~GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll G**0G} T&  <T!@}ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll G0**G T&  <T!@ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll G**G<ƣ T&  <T!@<ƣZA_hA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G!7 T&  <T!@!7ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllG**G T&  <T!@ZA_A_$GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0G+f T&  <T!@+fZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**0G P0 T&  <T!@ P0ZA_DA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**G0K T&  <T!@0KZA_5A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWi**GiK T&  <T!@iKZA_zA_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GleL T&  <T!@leLZA_A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**GeR T&  <T!@eRZA_$A_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe8%SYSTEMROOT%\System32\wbem\dnsclientcim.dllG**GOc T&  <T!@OcZA_)A_XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllG**0G2 T&  <T!@2ZA_)A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**0G T&  <T!@ZA_xA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**Gě T&  <T!@ěZA_qA_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**G? T&  <T!@?ZA_A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G. T&  <T!@.ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllG**Gn4: T&  <T!@n4:ZA_w A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllR T& T&  <T@@LZA_w A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00l ElfChnkGGGG@lUаj =|WfK ? ؖMF O&0**GL T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@LZA_w A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll;ҿ**0G6앷 T&  <T!@6앷ZA_A_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G:嶷 T&  <T!@:嶷ZA_ A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G)L! T&  <T!@)L!ZA_$A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G~ T&  <T!@~ZA_A_T lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeT %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**Gi T&  <T!@iZA_z A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllll**0Gn  T&  <T!@n   GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0GH T&  <T!@HZA_ A_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll&*0**G2d T&  <T!@2dZA_^A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll%G**G~e T&  <T!@~eZA_bA_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Ge T&  <T!@eZA_ A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G0 i T&  <T!@0 iZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exel%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****Gծ T&  <T!@ծZA_A_d | GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**0GF{ T&  <T!@F{ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G ѧɸ T&  <T!@ ѧɸZA_A_d | GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**0G9 T&  <T!@9ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G= T&  <T!@=ZA_"A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlll**G T&  <T!@ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G1e T&  <T!@1eZA_NA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll****GK R T&  <T!@K RZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0G'pd T&  <T!@'pdZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0G[ T&  <T!@[ZA_xA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Gِ͹ T&  <T!@ِ͹ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlll**Gͯ͹ T&  <T!@ͯ͹ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G#ι T&  <T!@#ιZA_A_ 8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll****G  T&  <T!@ ZA_A_48 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**0GnD T&  <T!@nDZA_A_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll|P(&0**0Gd)a T&  <T!@d)aZA_nA_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G| T&  <T!@|ZA_}A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll9G**G| T&  <T!@|ZA_đA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gy9} T&  <T!@y9}ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**0G~8 T&  <T!@~8ZA_<A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**GE T&  <T!@EZA_A_L GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeL %SYSTEMROOT%\System32\wbem\dnsclientcim.dll&**GŶE T&  <T!@ŶEZA_ϕA_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**0Gʺ T&  <T!@ʺZA_ϕA_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G0Ӻ T&  <T!@0ӺZA_ϕA_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**0G07 T&  <T!@07ZA_֕A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GZ T&  <T!@ZZA_eA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll {D**G4Z T&  <T!@4ZZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G-[ T&  <T!@-[ZA_OA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll&**Gay T&  <T!@ayZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0G T&  <T!@ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Gi  T&  <T!@i ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllV**GN  T&  <T!@N ZA_$A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gk T&  <T!@kZA__A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe4%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****G T&  <T!@ZA_xA_D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllJG**0Gײ/ T&  <T!@ײ/ZA_xA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**G`z9 T&  <T!@`z9D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0G:X T&  <T!@:XZA_A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G۳ T&  <T!@۳ZA_p A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G1 T&  <T!@1ZA_!A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GO T&  <T!@OZA_I!A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**Gм T&  <T!@мZA_ƛA_  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****GȠҼ T&  <T!@ȠҼZA_!%A_4< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe4%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****0G T&  <T!@ZA_N%A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G T&  <T!@ZA_N%A_  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0Gs T&  <T!@sZA_%A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GC T&  <T!@CZA_+&A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll8L**G5l T&  <T!@5lZA_A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G1䄽 T&  <T!@1䄽ZA_&A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllXG**G%6ʌ T&  <T!@%6ʌZA_6'A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll****0G"ͷ& T&  <T!@"ͷ&ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GD7 T&  <T!@D7ZA_(A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll5**G8B7 T&  <T!@8B7ZA_)A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gt½7 T&  <T!@t½7ZA_)A_`LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe`%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****GvE T&  <T!@vEZA_A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllfgw**HG+.T T&  <T!@+.TZA_IA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Em>B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .3 ClientMachine _User 2?ClientProcessId &O} Component &|g Operation (J ResultCode .ؖxb PossibleCause N({41D4975A-F95F-0000-3948-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '0'2UnknownoH**GrT T&  <T!@rTZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N({41D4975A-F95F-0000-3C44-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '4'2Unknownent**GT T&  <T!@TZA_ T&  <T!@>ZA_A_ pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllne**G̣ T&  <T!@̣ZA_6A_hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllAda**0G T&  <T!@ZA_6A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmi0**G3 T&  <T!@3ZA_6A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllIns**GCc T&  <T!@CcZA_7A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllE**GS T&  <T!@SZA_7A_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe\%SYSTEMROOT%\System32\wbem\dnsclientcim.dllWi**GGi T&  <T!@GiZA_7A_, GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll 00**0G7 T&  <T!@7ZA_7A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltAda0**0G T&  <T!@ZA_W8A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllrov0**0GdW T&  <T!@dWZA_w8A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle80**Gڅa T&  <T!@څaZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllvse**Ga T&  <T!@aZA_s9A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllC**Gl&9b T&  <T!@l&9bZA_9A_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll_TE**GI@j T&  <T!@I@jZA_-:A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0G2"y T&  <T!@2"yZA_-:A_T GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwm0**G닋 T&  <T!@닋ZA_-:A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllm**0Gr{  T&  <T!@r{ ZA_:A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0 C:\Windows\ T&  <TT@ ZA_Y;A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pindows-WMI-Activity/Operational 00l ElfChnkGvGGvG@X=n WfK ? MF &0**G  T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TQ!@ ZA_Y;A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllem**GY"  T&  <T!@Y" ZA_;A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllR**G-T$  T&  <T!@-T$ ZA_+A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllemR** G T&  <T!@ZA_?A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll3** G?G T&  <T!@?GZA_?A_p  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exep %SYSTEMROOT%\System32\wbem\dnsclientcim.dll2\w** G T&  <T!@ZA_?A_  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0 G* T&  <T!@*ZA_?A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnscl0**(G#'6 T&  <T!@#'6ZA_?A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000,TServerFeatureProviderwmiprvse.exe%windir%\system32\wbem\servercompprov.dlldll(**HG.6 T&  <T!@.6ZA_?A_ lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exe %systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**0G;Up T&  <T!@;UpZA_'A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G>]y T&  <T!@>]yZA_AA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****G&y T&  <T!@&yZA_jAA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G,z T&  <T!@,zZA_AA_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exed %SYSTEMROOT%\System32\wbem\dnsclientcim.dll1e**Go{ T&  <T!@o{ZA_0A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**0G#x T&  <T!@#xZA_0A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G T&  <T!@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**0G" T&  <T!@"ZA_EA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**G$ T&  <T!@$ZA_ɮA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**G% T&  <T!@%ZA_!A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gh% T&  <T!@h%ZA_wCA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G=, T&  <T!@=,ZA_A_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllnD**G&3 T&  <T!@&3ZA_DA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**0GaaDD T&  <T!@aaDDZA_DA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**GpT T&  <T!@pTZA_DA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll9G**0G T&  <T!@ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly9}0** G*h T&  <T!@*hZA_vA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****!G$ӣ T&  <T!@$ӣZA_EA_!GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlld**"G T&  <T!@ZA_.A_ "GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllim.**#G*! T&  <T!@*!ZA_>FA_#GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0$G T&  <T!@ZA_>FA_\$GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**%G T&  <T!@ZA_>FA_%GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0&GN T&  <T!@NZA_A_` &GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**'GM7) T&  <T!@M7)ZA_[GA_'GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllIP.**(GSP T&  <T!@SPZA_GA_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlli**)GƑ T&  <T!@ƑZA_HA_T)GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeT%SYSTEMROOT%\System32\wbem\dnsclientcim.dllim.***Gc T&  <T!@cZA_sA_*GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0+G"N; T&  <T!@"N;ZA_]IA_+GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**,Gv0r= T&  <T!@v0r=ZA_޴A_ ,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllIP.**-G== T&  <T!@==ZA_zJA_ -GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlli**.G"1> T&  <T!@"1>ZA_,A_ .GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll.**/G*A T&  <T!@*AZA_lA_  /GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllll**0G8M T&  <T!@8MZA_LA_ |0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem3**01G\ T&  <T!@\ZA_LA_ 1GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**2Gk T&  <T!@kZA_LA_ |2GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem3**03G@" T&  <T!@@"ZA_GMA_3GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**4G,N T&  <T!@,NZA_MA_H 4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllrCi**5Gh T&  <T!@hZA_ӷA_H 5GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**6Gf T&  <T!@fZA_CA_ 6GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllll**7GlP T&  <T!@lPZA_ NA_ D7GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllim.**08G† T&  <T!@†ZA_ NA_8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**9GgE T&  <T!@gEZA_ NA_ D9GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0:G6 T&  <T!@6ZA_NA_:GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**;G8 T&  <T!@8ZA_NA_H ;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllIP.**G2 T&  <T!@2ZA_vA_| >GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllst.**0?GeU T&  <T!@eUZA_vA_?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**@Gޔ T&  <T!@ޔ| @GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllll**0AGS T&  <T!@SZA_A_AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**BGU T&  <T!@UZA_ T&  <T!@>ZA_WA_SGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@ 0**TG| T&  <T!@|ZA_WA_ (TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0UG1l T&  <T!@1lZA_PA_UGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@C0**VGTn T&  <T!@TnZA_A_VGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll@8**WGMn T&  <T!@MnZA_-A_WGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll/**XG:[o T&  <T!@:[oZA_VA_XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll;**YG.*| T&  <T!@.*|ZA_A_ YGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@ux**0ZGJN T&  <T!@JNZA_A_ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@C0**[G] T&  <T!@]ZA_4^A_,L[GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe,%SYSTEMROOT%\System32\wbem\dnsclientcim.dllZ**\G T&  <T!@ZA_H^A_ \GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT**]G`= T&  <T!@`=ZA_H^A_ h]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll!**0^Gd@ T&  <T!@d@ZA_H^A_ ^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllKZ0**_GuF T&  <T!@uFZA__A__GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**`G4F T&  <T!@4FZA_h_A_`GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllY**aGXF T&  <T!@XFZA_A_8( aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe8%SYSTEMROOT%\System32\wbem\dnsclientcim.dllT**bGf T&  <T!@fZA_.`A_<,bGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll**0cG:a7 T&  <T!@:a7ZA_.`A_t cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**dG T&  <T!@ZA_aA_dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll<**eGO T&  <T!@OZA_haA_eGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**fGCi T&  <T!@CiZA_bA_ |fGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll<**gG5 T&  <T!@50 gGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll<**hGG\ T&  <T!@G\ZA_~A_t hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**iG8 T&  <T!@8ZA_A_t iGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**jG F T&  <T!@ FZA_cA_t jGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**0kGȝ T&  <T!@ȝZA_A_DkGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**lGT u T&  <T!@T uZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllT**0mG2Kw7 T&  <T!@2Kw7ZA_fA_ mGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**nGG T&  <T!@GZA_fA_, lnGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**oG n[ T&  <T!@ n[ZA_gA_t oGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**pG@[ T&  <T!@@[ZA_-hA_t pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**qG?[ T&  <T!@?[ZA_uA_ qGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**0rGNN T&  <T!@NNZA_XiA_ rGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**sG  T&  <T!@ ZA_XiA_L sGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**tGw  T&  <T!@w ZA_QjA_,tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll&**uG  T&  <T!@ ZA_jA_,uGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**vG T&  <T!@ZA_]kA_ vGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlldow T& T&  <T@ZA_lA_hwGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFctivity/Operational 00l ElfChnkwGGwGG=n WfK ? MF &0**wG T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@ZA_lA_hwGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&**xG& T&  <T!@&ZA_rA_ | xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**yGL T&  <T!@LZA_LmA_,yGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**zG T&  <T!@ZA_mA_,zGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**{G  T&  <T!@ ZA_:A_,{GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll+**0|G{ T&  <T!@{ZA_mA_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllN0**}GVTA T&  <T!@VTAZA_knA_ | }GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**~G9 T&  <T!@9ZA_A_X P~GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeX %SYSTEMROOT%\System32\wbem\dnsclientcim.dll****Gzx` T&  <T!@zx`ZA_qA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll3**0GHq T&  <T!@HqZA_qA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G Y T&  <T!@ YZA_]A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll***G` T&  <T!@`ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlli.d**G^% T&  <T!@^%ZA_rA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**GM T&  <T!@MZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllbem**G  T&  <T!@ ZA_sA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllv**0G$ T&  <T!@$ZA_sA_0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltemr0**Gkd62 T&  <T!@kd62ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**GC T&  <T!@CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlld **GC T&  <T!@CZA_uA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllC**G\qD T&  <T!@\qDZA_A_ xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllv**G T&  <T!@ZA_vA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dllmip**0Gg T&  <T!@gZA_vA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllov0**G9 T&  <T!@9ZA_vA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllwmi**G[ * T&  <T!@[ *ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllv**Gk T&  <T!@kZA_QwA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllm**Gԩ T&  <T!@ԩZA_xA_ @ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllrvs**0G5H T&  <T!@5HZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll:\Wi0**Gn}y T&  <T!@n}yZA_A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllv**0G T&  <T!@ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll:\Wi0**GR T&  <T!@RZA_yA_t8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllv**GY T&  <T!@YZA_A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllwmi**G  T&  <T!@ ZA_9A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllv**G̖ T&  <T!@̖ZA_zA_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeH %SYSTEMROOT%\System32\wbem\dnsclientcim.dllrvs**G- T&  <T!@-ZA_!{A_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllmip**0Gm< T&  <T!@m<ZA_!{A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllov0**GL T&  <T!@LZA_|A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GD>L T&  <T!@D>LZA_|A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllN**GAL T&  <T!@ALZA_%}A_L<GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeL%SYSTEMROOT%\System32\wbem\dnsclientcim.dlltcp**GcJ T&  <T!@cJZA_|}A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllter**0G6f T&  <T!@6fZA_|}A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllprvs0**G T&  <T!@ZA_y~A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G' T&  <T!@'ZA_~A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllN**GDž T&  <T!@DžZA_vA_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllp**GnG T&  <T!@nGZA_/A_ ` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllim**G` T&  <T!@`ZA_{A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlledT**0G( T&  <T!@(ZA_{A_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllprvs0**GR T&  <T!@RZA_KA_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G< T&  <T!@<ZA_A_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllN**GE T&  <T!@EZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllPer**G F T&  <T!@ FZA_'A_8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll32_**0GW T&  <T!@WZA_'A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllttcp0**GD?b T&  <T!@D?bZA_A_8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllter**Gc T&  <T!@cZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlldn**Gc T&  <T!@cZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**G~[d T&  <T!@~[dZA_CA_|$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe|%SYSTEMROOT%\System32\wbem\dnsclientcim.dll32_**GDA T&  <T!@DAd GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0Gx T&  <T!@xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlln32_0**G T&  <T!@ZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll 00**G: T&  <T!@:ZA_6A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G T&  <T!@ZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G*G4 T&  <T!@*G4ZA_LJA_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exet%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**0G-q T&  <T!@-qZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**G T&  <T!@ZA_A_ $ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0G6 T&  <T!@6ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**G/0 T&  <T!@/0ZA_A_ $ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0Ge T&  <T!@eZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllCim0**G3:  T&  <T!@3: ZA_GA_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlledu**Gl? T&  <T!@l?ZA_cA_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlli**G T&  <T!@ZA_A_( GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe(%SYSTEMROOT%\System32\wbem\dnsclientcim.dllPer**G1 ] T&  <T!@1 ]ZA_yA_$GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe$%systemroot%\system32\wbem\wmiprov.dll**G pk T&  <T!@ pkZA_yA_ 8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0G]km T&  <T!@]kmZA_yA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZNe0**0Gْ T&  <T!@ْZA_VA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllim0**GƘ T&  <T!@ƘZA_aA_D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllPer**G T&  <T!@ZA_ȊA_D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll3**GJq T&  <T!@JqZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GL T&  <T!@LZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**0G6Z:  T&  <T!@6Z: ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G #1 T&  <T!@ #1ZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllNe**G= T&  <T!@=ZA_bA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GQ8= T&  <T!@Q8=ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G= T&  <T!@=ZA_5A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G!G T&  <T!@!GZA_A_ H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll 00**Gۓ T&  <T!@ۓZA_%A_ lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**0G  T&  <T!@ ZA_%A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**GY7 T&  <T!@Y7ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll 00**G T&  <T!@ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll0**GkDc T&  <T!@kDcZA_A_$GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe$%SYSTEMROOT%\System32\wbem\dnsclientcim.dll 00**GAd# T&  <T!@Ad#ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllna**GLB$ T&  <T!@LB$ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dllows**0Gxi$ T&  <T!@xi$ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**GTt T&  <T!@TtZA_A_80GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllvit**0Ge!ۅ T&  <T!@e!ۅZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**G졓 T&  <T!@졓ZA_,A_80GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllvit**G T&  <T!@HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllvit**G鶫 T&  <T!@鶫ZA_YA_HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**Gc. T&  <T!@c.ZA_֑A_`GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe`%SYSTEMROOT%\System32\wbem\dnsclientcim.dllvit**G56 T&  <T!@56ZA_A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0G8 T&  <T!@8ZA_A_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**GְT T&  <T!@ְTZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllvit**G/U T&  <T!@/UZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**GkU T&  <T!@kUZA_5A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllt**G8}7` T&  <T!@8}7`ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll/Op**Ga T&  <T!@aZA_?A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**0G]Xz T&  <T!@]XzZA_?A_LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**G T&  <T!@ZA_LA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**G T&  <T!@ZA_A_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllAct**G  T&  <T!@ ZA_ٖA_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**G T&  <T!@ZA_ A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllWin**Gg T&  <T!@gZA_A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0G8 T&  <T!@8ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**G\ T&  <T!@\ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllAct**G: T&  <T!@:ZA_:A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**G~W T&  <T!@~WZA_iA_` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe`%SYSTEMROOT%\System32\wbem\dnsclientcim.dllWin**G @ T&  <T!@ @ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0GQ T&  <T!@QZA_A_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**Ga] T&  <T!@a]ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**Gm T&  <T!@mZA_A_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWMIctivity/Operational 000BFctivity/Operational 00l ElfChnkGaGGaGZ{wA=n WfK ? MF &0**GӦn T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Te!@ӦnZA_A_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GTun T&  <T!@TunZA_A_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll.**GPх T&  <T!@PхZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllG**G+ T&  <T!@+ZA_~A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll.dl**0G l T&  <T!@ lZA_~A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll|G0**G0 T&  <T!@0ZA_~A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0G؏&* T&  <T!@؏&*ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll~G0**GEc:J T&  <T!@Ec:JZA_iA_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****G$AnJ T&  <T!@$AnJZA_A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G8J T&  <T!@8JZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlli.d**G71 T&  <T!@71ZA_A_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0Gm˶ T&  <T!@m˶ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll^%0**Gi T&  <T!@iZA_A_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**0GFr T&  <T!@Fr GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**G T&  <T!@ZA_^A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Gg7 T&  <T!@g7ZA_¢A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G[{ T&  <T!@[{ZA_mA_ @GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllG**G5%Y T&  <T!@5%YZA_SA_ | GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllC**0Gyi T&  <T!@yiZA_SA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0G̏ T&  <T!@̏ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G T&  <T!@ZA_EA_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**Gӝ T&  <T!@ӝZA_A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G = T&  <T!@ =ZA_A_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G T&  <T!@ZA_#A_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe$ %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G:L  T&  <T!@:L ZA_A_` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**0G^ T&  <T!@^ZA_A_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G-/( T&  <T!@-/(ZA_A_` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll&**0GB T&  <T!@BZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** G-T T&  <T!@-TZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll** GST T&  <T!@STZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll** G%vU T&  <T!@%vUZA_٨A_D` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeD%SYSTEMROOT%\System32\wbem\dnsclientcim.dll** GY T&  <T!@YZA_ A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0 G.) T&  <T!@.)ZA_ A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0Gb T&  <T!@bZA_A_, GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**Gǽ T&  <T!@ǽZA_$A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G T&  <T!@ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GG T&  <T!@GZA_A_ ` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GG T&  <T!@ZA_cA_>GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllft-W0**?G7 T&  <T!@7ZA_A_\?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllMic**@Gd8 T&  <T!@d8ZA_A_\@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**AGYZ T&  <T!@YZZA_3A_\AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**BG< T&  <T!@<ZA_A_x BGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllMic**CGib T&  <T!@ibZA_A_, CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**0DGCi T&  <T!@CiZA_A_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllft-W0**0EGm_ T&  <T!@m_ZA_A_pEGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllity0**FGF T&  <T!@FZA_A_ FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll#F**GG~x T&  <T!@~xZA_#A_ GGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllA**HG T&  <T!@ZA_A_@ $HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe@ %SYSTEMROOT%\System32\wbem\dnsclientcim.dlltiv**IG;ֽ T&  <T!@;ֽZA_A_PIGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**0JG4~ T&  <T!@4~ZA_A_pJGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**0KGۭnb T&  <T!@ۭnb h KGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**LGm T&  <T!@mZA_A_ LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**MGF+9m T&  <T!@F+9mZA_A_ MGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllM**NG m T&  <T!@ mZA_A_ NGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllcro**OGj T&  <T!@jZA_A_OGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0PGT T&  <T!@TZA_A_0PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**QG T&  <T!@ZA_A_QGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**0RGex: T&  <T!@ex:ZA_sA_xRGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**SGe T&  <T!@eZA_A_pSGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlloft**TGC T&  <T!@CZA_WA_pTGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlln**UGi T&  <T!@iZA_A_pUGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllM**VG6 T&  <T!@6ZA_^A_ $ VGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllcro**WGR_l T&  <T!@R_lZA_LA_DWGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0XG !~ T&  <T!@ !~ZA_LA_0XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**YG T&  <T!@ZA_LA_DYGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0ZG[ T&  <T!@[ZA_A_0ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**[G\ T&  <T!@\ZA_QA_x[GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWin**\G.s T&  <T!@.sZA_A_x\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllI**]GGx, T&  <T!@Gx,ZA_A_ ]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllWMI**^Gp. T&  <T!@p.ZA_A_^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0_G|0 T&  <T!@|0ZA_A_D _GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**0`Gz T&  <T!@zZA_{A_D `GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**aGO T&  <T!@OZA_A_xaGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllvitOperational  T&  <Tsystemroot%\system32\wbem\NetTCPIP.dllWMIctivity/Operational 000BFctivity/Operational 00l ElfChnkbGGbGG!Ik9=/N WfK ? hMF ߱Q&0**bGFPy T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Te!@FPyZA_A_xbGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**cGJ T&  <T!@JZA_BA_ 8cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll.**dG2$ T&  <T!@2$ZA_nA_ dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0eGy T&  <T!@yZA_nA_\ eGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll l0**fGT T&  <T!@TZA_nA_ fGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**0gG&?- T&  <T!@&?-ZA_A_D gGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll؏&*0**hGrj/ T&  <T!@rj/ZA_A_xhGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlli.d**iG1/ T&  <T!@1/ZA_NA_xiGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**jGM0 T&  <T!@M0ZA_A_xjGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**kG^p3 T&  <T!@^p3ZA_A_@kGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe@%SYSTEMROOT%\System32\wbem\dnsclientcim.dlli.d**0lGB3 ?+Axn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI/[Id .N3 ClientMachine _User 2?ClientProcessId &߱} Component & xg Operation (9J ResultCode .hxb PossibleCause N({41D4975A-F95F-0000-3C44-D5415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '0'2UnknownpH**G& T&  <T!@&ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN({41D4975A-F95F-0000-7C15-D6415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '420'2Unknown**G T&  <T!@ZA_ڙA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN({41D4975A-F95F-0000-7C15-D6415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '504'2UnknownM**0GqΦ T&  <T!@qΦZA_G2A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**GT T&  <T!@TZA_yA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllcro**G<[ T&  <T!@<[ZA_Z3A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**G& T&  <T!@&ZA_3A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll#F**G{x4 T&  <T!@{x4ZA_TA_ hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0Gt_E T&  <T!@t_EZA_TA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**GR T&  <T!@RZA_TA_ hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0GIep T&  <T!@IepZA_54A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**Gё T&  <T!@ёZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllcro**G[ T&  <T!@[ZA_YA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GW{ T&  <T!@W{ZA_5A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllW**G퇖 T&  <T!@퇖ZA_6A_ pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dlltiv**G T&  <T!@ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0GER T&  <T!@ERZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**G*_ T&  <T!@*_ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0GQAB T&  <T!@QABZA_u8A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**G^'M T&  <T!@^'MZA_A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**G`OM T&  <T!@`OMZA_9A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllW**GnM T&  <T!@nMZA_v9A_ | GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dlltiv**G- T&  <T!@-ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0G铯 T&  <T!@铯ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**G  T&  <T!@ ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllty**0GK T&  <T!@KZA_bA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**G7t T&  <T!@7t TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlltiv**G-m' T&  <T!@-m'ZA_:A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G- T&  <T!@-ZA_{A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlls-W**G$[ T&  <T!@$[ZA_A_h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0GJ] T&  <T!@J]ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**0G T&  <T!@ZA_;A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**G$ T&  <T!@$ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllcro**GdI T&  <T!@dIZA_MA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gm촪 T&  <T!@m촪ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllW**G¸ T&  <T!@¸ZA_=A_|pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe|%SYSTEMROOT%\System32\wbem\dnsclientcim.dllona000BFctivity/Operational 00l ElfChnkGIGGIGG7b!=n WfK ? MF &0**G5  T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@5 ZA_0A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.d**0Gל T&  <T!@לZA_0A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldG0**0G#Z T&  <T!@#ZZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G Ye T&  <T!@ YeZA_=A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****Ge T&  <T!@eZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Ge T&  <T!@eZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dlll**Gű T&  <T!@űZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0G T&  <T!@ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllM00**0G҃  T&  <T!@҃ ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G?) T&  <T!@?)ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**GREM T&  <T!@REMZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G7F T&  <T!@7FZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllnG**Gm_d T&  <T!@m_dZA_?A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0Gw T&  <T!@wZA_?A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllpG0**0G&` T&  <T!@&`ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllqG0**G@ T&  <T!@@ZA_@A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllrG**Gf T&  <T!@fZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gܹ/ T&  <T!@ܹ/ZA_ZA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**GT] T&  <T!@T]ZA_A_( GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllIcI**Gu7 T&  <T!@u7ZA_ZA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dllw**GIn& T&  <T!@In&PU- GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllot%**0GY5) T&  <T!@Y5)PU-GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPIP.0**0G Bs T&  <T!@ BsZA_CA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**GU- T&  <T!@U-ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**GV T&  <T!@VZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**G T&  <T!@ZA_A_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllrfI**GU8 T&  <T!@U8ZA_'A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllot%**0Gp T&  <T!@pZA_'A_HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPIP.0**0GF & T&  <T!@F &ZA_A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**G.1 T&  <T!@.1 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll.dl**Gf2 T&  <T!@f2ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GȪ2 T&  <T!@Ȫ2ZA_[A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**Ga} T&  <T!@a}ZA_A_, GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Gp؎ T&  <T!@p؎ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**0G? T&  <T!@?ZA_FA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**Gu T&  <T!@uZA_]A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**G$ T&  <T!@$ZA_GA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllv**Gʇ T&  <T!@ʇZA_1A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**Gzm T&  <T!@zmZA_)IA_D GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeD %SYSTEMROOT%\System32\wbem\dnsclientcim.dll****G:/ T&  <T!@:/ZA_t A_ hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllfgw**0GޣA T&  <T!@ޣAZA_t A_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**0G] T&  <T!@]ZA_ A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**G>  T&  <T!@> ZA_] A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****G~> T&  <T!@~>ZA_IA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GqV T&  <T!@qVZA_JA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****0Gâ T&  <T!@âZA_u A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**G` T&  <T!@`ZA_u A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0G5|> T&  <T!@5|>ZA_ A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**GVF T&  <T!@VFZA_ A_dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****GG T&  <T!@GZA_$ A_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GUVG T&  <T!@UVGZA_KA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****G T&  <T!@ZA_ A_ t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0 G#D T&  <T!@#DZA_ A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** Gh T&  <T!@hZA_ A_ t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0 GmE9 T&  <T!@mE9ZA_LA_T GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** G2 T&  <T!@2ZA_LA_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll** G\M T&  <T!@\MZA_MA_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G T&  <T!@ZA_#A_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G0 ) T&  <T!@0 )ZA_OA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll****GIIH T&  <T!@IIHZA_PA_L<GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0G%Z T&  <T!@%ZZA_PA_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcfgw0**Ggݠf T&  <T!@gݠfZA_PA_L0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllIP.**0Gt T&  <T!@tZA_PA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**Gĭ T&  <T!@ĭZA_iA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**Gu T&  <T!@uZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll;**G8 T&  <T!@8ZA_QA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exel %SYSTEMROOT%\System32\wbem\dnsclientcim.dllfgw**Gu T&  <T!@uZA_&RA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllot%**0G T&  <T!@ZA_&RA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPIP.0**0G;V T&  <T!@;VZA_5RA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**G3` T&  <T!@3`ZA_2A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll.dl**G%` T&  <T!@%`ZA_SA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GY^=a T&  <T!@Y^=aZA_SA_dp GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exed%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G޼ T&  <T!@޼< GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0G- T&  <T!@-GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**0GLL T&  <T!@LLZA_YA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**0 G:  T&  <T!@: ZA_"TA_  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**!G\  T&  <T!@\ ZA_A_!GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**"Gѷ  T&  <T!@ѷ ZA_2A_"GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**#GKI  T&  <T!@KI ZA_ UA_#GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**$G} T&  <T!@}ZA_A_X$GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeX%SYSTEMROOT%\System32\wbem\dnsclientcim.dlln/2**%G؄b T&  <T!@؄bZA_*A_t %GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllAP**0&Gjr T&  <T!@jrZA_*A_l&GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**0'G T&  <T!@ZA_VA_'GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(G3} T&  <T!@3}ZA_A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWbe**)GZI T&  <T!@ZIZA_A_)GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt***G T&  <T!@ZA_A_`$ *GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe`%SYSTEMROOT%\System32\wbem\dnsclientcim.dllAct**+G T&  <T!@ZA_,A_h P +GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllvit**0,G`% T&  <T!@`%ZA_,A_,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**0-GuPTo T&  <T!@uPToZA_A_-GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**.GCs T&  <T!@CsZA_A_.GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**/GIt T&  <T!@ItZA_,XA_/GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllt**0Gf,t T&  <T!@f,tZA_A_t0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exet%SYSTEMROOT%\System32\wbem\dnsclientcim.dllona**1GY] T&  <T!@Y]ZA_#A_p 1GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllAct**02G * T&  <T!@ *ZA_#A_D 2GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**3G&8 T&  <T!@&8ZA_#A_p 3GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllona**04Gv" T&  <T!@v"ZA_XA_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**5Gfd# T&  <T!@fd#ZA_XYA_5GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll 00**6G# T&  <T!@#ZA_YA_6GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**7G# T&  <T!@#ZA_YA_7GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllt**8G<' T&  <T!@<'ZA_[A_dd8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exed%SYSTEMROOT%\System32\wbem\dnsclientcim.dllona**9GH~ T&  <T!@H~ZA_A_@ 9GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllAct**0:G! T&  <T!@!ZA_A_ :GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**0;GC T&  <T!@CZA_] A_ ;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G7 T&  <T!@7ZA_!A_>GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllona**?G6+ T&  <T!@6+ZA_W!A_lx ?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllona**0@GI= T&  <T!@I=ZA_W!A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**0AGć T&  <T!@ćZA_p_A_ AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZNe0**BGL;[ T&  <T!@L;[ZA_N"A_lBGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**CGK T&  <T!@KZA_`A_lCGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**DG+p T&  <T!@+pZA_`A_PXDGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeP%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**EGW T&  <T!@WX0EGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllona**0FG T&  <T!@ FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**GG# T&  <T!@#X0GGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll 00**0HGI: T&  <T!@I:ZA_`A_ HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IG[@< T&  <T!@[@<ZA_g$A_lIGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllXdnsc T&  <Tem32\wbem\dnsclientcim.dllona000BFctivity/Operational 00l ElfChnkJGGJGG~+lY=On,WfK ? MF ƍq&0**JGRm< T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Te!@Rm<ZA_aA_lJGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**KGE< T&  <T!@E<ZA_aA_lKGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dlld**LGӪC T&  <T!@ӪCZA_CcA_t LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exet %SYSTEMROOT%\System32\wbem\dnsclientcim.dllem3**MG T&  <T!@ZA_}&A_P MGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllm\N**0NG T&  <T!@ZA_}&A_ NGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm.dl0**0OGoY T&  <T!@oYZA_eA_ OGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**PG T&  <T!@ZA_'A_ PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****QG/ T&  <T!@/ZA_.fA_ QGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlld**RG8Q T&  <T!@8QZA_fA_RGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllem3**SG+aS T&  <T!@+aSZA_{(A_4SGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllm\N**0TGBV T&  <T!@BVZA_{(A_LTGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm.dl0**0UG. T&  <T!@.ZA_)A_ UGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**VG| T&  <T!@|ZA_Y)A_VGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****WG^ T&  <T!@^ZA_hA_WGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlld**XGT7 T&  <T!@T7ZA_hA_XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllem3**YG-8 T&  <T!@-8ZA_9*A_,YGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllm\N**0ZG-  T&  <T!@- ZA_9*A_ ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm.dl0**0[G;R T&  <T!@;RZA_hA_L[GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**\G9'T T&  <T!@9'TZA_*A_\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllIcI**]GjtT T&  <T!@jtTZA_iA_]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll&**^G/U T&  <T!@/UZA_iA_^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**_GIW T&  <T!@IWZA_@-A_ _GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll****`G  T&  <T!@ ZA_v-A_`GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllfgw**0aG!ۻ T&  <T!@!ۻZA_v-A_aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**bGE T&  <T!@EZA_v-A_bGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0cGh T&  <T!@hZA_kA_H cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**dG [  T&  <T!@ [ ZA_i.A_dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllp**eGJE  T&  <T!@JE ZA_nlA_eGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll.**fGw~  T&  <T!@w~ ZA_lA_ fGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllfgw**gGr] T&  <T!@r]ZA_lA_ gGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIP.**0hGUyo T&  <T!@UyoZA_lA_\ hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**iG6a| T&  <T!@6a|ZA_lA_ iGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0jG|  T&  <T!@| ZA_lA_LjGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**kG-; T&  <T!@-;ZA_0A_kGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlll**lGuH T&  <T!@uHZA_\1A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**mGż T&  <T!@żZA_lmA_|mGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllIP.**nG- T&  <T!@-h nGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllapt**0oG=f{! T&  <T!@=f{!X oGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll0**0pGokk T&  <T!@okkZA_mA_pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll:/0**qGX_l T&  <T!@X_lZA_RnA_( qGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**rG7^*m T&  <T!@7^*mZA_3A_( rGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**sG_m T&  <T!@_mZA_3A_( sGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dlls**tGVo T&  <T!@VoZA_|oA_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllIP.**uG*x T&  <T!@*xZA_17A_\x uGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllapt**0vG|H T&  <T!@|HZA_17A_vGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**0wGUO T&  <T!@UOZA_%qA_ wGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**xG2D( T&  <T!@2D(ZA_8A_,xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**yG~( T&  <T!@~(ZA_qA_,yGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**zG( T&  <T!@(ZA_?rA_zGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllIP.**{G*Iu T&  <T!@*IuZA_[9A_D {GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllapt**0|G` T&  <T!@`ZA_[9A_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**0}G& T&  <T!@&ZA_9A_}GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**~G  T&  <T!@ ZA_:A_,~GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlll**GIX T&  <T!@IXZA_;A_,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G T&  <T!@ZA_;A_ @ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllfgw**G1 T&  <T!@1ZA_;A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllIP.**0GM[Q< T&  <T!@M[Q<ZA_;A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**0G]J T&  <T!@]JZA_PB3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMIO[Id .n3 ClientMachine _User 2ƍ?ClientProcessId &} Component &,g Operation (YJ ResultCode .xb PossibleCause N( @{7E925CA4-758D-4A87-8360-878BB6BB3909}FILF-APP-RECNT AUTHORITY\SYSTEMH CoreStart IWbemServices::CreateInstanceEnum - ROOT\StandardCimv2 : MSFT_NetNeighborCould not send status to clientP**G>] T&  <T!@>]ZA_.wA_hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dlloft**0Gd T&  <T!@dZA_.wA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**0G6 T&  <T!@6ZA_@wA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**GúB T&  <T!@úBZA_lAA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**GK9C T&  <T!@K9CZA_wA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**GC T&  <T!@CZA_uxA_< 0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe< %SYSTEMROOT%\System32\wbem\dnsclientcim.dllWin**G9 T&  <T!@9ZA_@BA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0Gp T&  <T!@pZA_@BA_8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**0G T&  <T!@ZA_BA_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**G T&  <T!@ZA_GCA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**GZ T&  <T!@ZZA_CA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**G5h T&  <T!@5hZA_DA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllty**G] @ T&  <T!@] @ d dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll#F**0G`8aR T&  <T!@`8aR lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**G]a T&  <T!@]a d dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllcro**0GR T&  <T!@RZA_yA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**G  T&  <T!@ ZA_EA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWin**G8:; T&  <T!@8:;ZA_|FA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllM**Gl T&  <T!@lZA_FA_8 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllv**G. T&  <T!@.ZA_{A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll#F**G9\ T&  <T!@9\ZA_.HA_T GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllty**0Ghu-  T&  <T!@hu- ZA_.HA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**0G-O  T&  <T!@-O ZA_HA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**GtZ  T&  <T!@tZ ZA_IA_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**GȰZ  T&  <T!@ȰZ ZA_gIA_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllv**G0[  T&  <T!@0[ ZA_IA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll#F**G;N  T&  <T!@;N ZA_IA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllty**0G$  T&  <T!@$ ZA_IA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**0G  T&  <T!@ ZA_pJA_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**Gz_  T&  <T!@z_ ZA_JA_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**G  T&  <T!@ ZA_!KA_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllo**G  T&  <T!@ ZA_KA_|GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe|%SYSTEMROOT%\System32\wbem\dnsclientcim.dllty**G X  T&  <T!@ X ZA_KA_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0G`j  T&  <T!@`j ZA_KA_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**0G  T&  <T!@ ZA_4LA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**GO  T&  <T!@O ZA_LA_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllWin**Gv  T&  <T!@v ZA_A_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**G  T&  <T!@ ZA_A_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllo**Gz޾  T&  <T!@z޾ ZA_A_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe0%SYSTEMROOT%\System32\wbem\dnsclientcim.dllty**GY3  T&  <T!@Y3 ZA_LNA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0G=  T&  <T!@= ZA_LNA_X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**GN+  T&  <T!@N+ ZA_LNA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0G9׏g  T&  <T!@9׏g ZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**G}p  T&  <T!@}p ZA_OA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**Gգp  T&  <T!@գp ZA_PA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllv**G߇#q  T&  <T!@߇#q ZA_ԃA_< hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe< %SYSTEMROOT%\System32\wbem\dnsclientcim.dll#F**GѾ  T&  <T!@Ѿ ZA_QA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllty**0G~  T&  <T!@~ ZA_QA_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**G  T&  <T!@ ZA_QA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0Gb  T&  <T!@b ZA_IA_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**GQ#  T&  <T!@Q# ZA_RA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll{M**G|#  T&  <T!@|# ZA_[A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllvy#F~J{Mic T&  <T!@# ZA_A_ X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll 00ElfChnkG1GG1G 8x=` If= ? MF &"**xG#  T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <T_!@#  X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"00\M!kb]˒AI)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName = sCode *` HostProcess   , v# ProviderPath Vdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllx**G`r  T&  <T!@`r   GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\**0G4@  T&  <T!@4@   GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**0Gu&>  T&  <T!@u&> ZA_SA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Gb  T&  <T!@b ZA_SA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlli.d**G  T&  <T!@ ZA_0TA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll3**G|  T&  <T!@| ZA_IA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllC**G  T&  <T!@ ZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**G7=$  T&  <T!@7=$ ZA_8VA_l 0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllscl**0G*6  T&  <T!@*6 ZA_8VA_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm\N0**0G  T&  <T!@ ZA_A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm.dl0**Gr&  T&  <T!@r& ZA_[WA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllem3**G4  T&  <T!@4 ZA_WA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllC**Gӯ-  T&  <T!@ӯ- ZA_pA_TXGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exeT%SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**GQ  T&  <T!@Q ZA_6XA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllscl**0G  T&  <T!@ ZA_6XA_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm\N0**Gh|0  T&  <T!@h|0 ZA_6XA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0GA2 T&  <T!@A2ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**GbbM9 T&  <T!@bbM9ZA_YA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllm\N**G0%t9 T&  <T!@0%t9ZA_ӋA_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllA**G9 T&  <T!@9ZA_}YA_P GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exeP%SYSTEMROOT%\System32\wbem\dnsclientcim.dllem\**GxJ߉ T&  <T!@xJ߉ZA_YA_| ` GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllm\d**0G  T&  <T!@ ZA_YA_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**0GM{ T&  <T!@M{ZA_A_t GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**G T&  <T!@ZA_A_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllst.**G߼ T&  <T!@߼ZA_~A_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll3**GO{ T&  <T!@O{ZA_A_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllC**G~ T&  <T!@~ZA_r[A_tL GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exet%SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**0G䎧N T&  <T!@䎧NZA_ŐA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllfgw0**G'T T&  <T!@'TZA_ŐA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIP.**0GIit T&  <T!@IitZA_ߐA_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**G9 T&  <T!@9ZA_OA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllll**Gr"# T&  <T!@r"#ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**G% T&  <T!@%ZA__A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exeH%SYSTEMROOT%\System32\wbem\dnsclientcim.dllIP.**Gz T&  <T!@zZA_A_|, GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllapt**0GP)J T&  <T!@P)JZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllIP.0**G+  T&  <T!@+ ZA_A_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllapt**0GufK T&  <T!@ufKZA_`A_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll0**GT T&  <T!@TZA_TA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllem3**GgX U T&  <T!@gX UZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllC**G!U T&  <T!@!UZA_LA_ @ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**GK T&  <T!@KZA_bA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\**0G T&  <T!@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**0G T&  <T!@ZA_oA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll|H0**Gj T&  <T!@jZA_&cA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlli.d**GU T&  <T!@UZA_AcA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll3**GYՃ T&  <T!@YՃZA_vA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllC**G4B  T&  <T!@4B ZA_,A_hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**G!2U T&  <T!@!2UZA_eA_ LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllscl**0GCf T&  <T!@CfZA_eA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllapt0**0G T&  <T!@ZA_?fA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**G')л T&  <T!@')лZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllem3**Gi T&  <T!@iZA_fA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllC**Gy T&  <T!@yZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**G8 T&  <T!@8ZA_igA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllscl**0Gy| T&  <T!@y|ZA_igA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllIP.0**0Gc T&  <T!@cZA_ hA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**Gͪn T&  <T!@ͪnZA_qhA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllem3**GӅn T&  <T!@ӅnZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllC**G[[o T&  <T!@[[oZA_iA_| GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe| %SYSTEMROOT%\System32\wbem\dnsclientcim.dllapt**G] T&  <T!@]ZA_iA_4\ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllem\**0G`b T&  <T!@`bZA_iA_$ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**0G+ T&  <T!@+ZA_6jA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwind0**G# T&  <T!@#ZA_jA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllRE**Gt\ T&  <T!@t\ZA_xA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GR T&  <T!@RZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G@F  T&  <T!@@F ZA_zA_ X GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllI-A**Glm T&  <T!@lmZA_lA_X T GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dlloso**0GHkY T&  <T!@HkYZA_lA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**G  T&  <T!@ ZA_lA_X T GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0G\R T&  <T!@\RZA_ٝA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**Gd T&  <T!@dZA_]A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**G\  T&  <T!@\ ZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllW**G T&  <T!@ZA_A_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dlloso**G57\  T&  <T!@57\ ZA_anA_$ < GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0G h4 T&  <T!@ h4ZA_anA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**0 Gl$| T&  <T!@l$|ZA_nA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0** GK T&  <T!@KZA_oA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty** GkhDŽ T&  <T!@khDŽZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllW** G1DF T&  <T!@1DFZA_xA_ 0 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllI-A** G5 T&  <T!@5 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0GBf T&  <T!@BfH GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**0GC  T&  <T!@C ZA_pA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**G&0 T&  <T!@&0ZA_{qA_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**G61 T&  <T!@61ZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GK1 T&  <T!@K1ZA_qA_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**G8 T&  <T!@8ZA_sA_\ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe\%SYSTEMROOT%\System32\wbem\dnsclientcim.dllI-A**Gl T&  <T!@lZA_sA_ h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0Gȗ T&  <T!@ȗZA_sA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**0G T&  <T!@ZA_XtA_4 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**Gu T&  <T!@uZA_kA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**Gc T&  <T!@cZA_դA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GL9 T&  <T!@L9ZA_)uA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllI-A**G-H8 T&  <T!@-H8ZA_~A_$  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dlloso**0GJ T&  <T!@JZA_~A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**G⋕V T&  <T!@⋕VZA_~A_$  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0G T&  <T!@ZA_uA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**Gi T&  <T!@iZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**G: T&  <T!@:ZA_3A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllW** G T&  <T!@ZA_ۦA_04 GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe0%SYSTEMROOT%\System32\wbem\dnsclientcim.dlloso**!G  T&  <T!@ ZA_rwA_L !GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0"Goj T&  <T!@ojZA_rwA_l"GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**0#GMwG T&  <T!@MwGZA_wA_@#GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**$GvI T&  <T!@vIZA_9xA_ $GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlltiv**%GEmI T&  <T!@EmIZA_ A_ %GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**&G"OCJ T&  <T!@"OCJZA_OA_ &GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllW**'GSZP T&  <T!@SZPZA_%yA_ ( 'GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllI-A**(Gq T&  <T!@qZA_"{A_L 8(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dlloso**0)G{7 T&  <T!@{7ZA_"{A_ )GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**0*G/5 T&  <T!@/5ZA_{A_ *GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**+Gì T&  <T!@ìZA_=|A_+GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllty**,G  T&  <T!@ ZA_A_,GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**-GST T&  <T!@STZA_|A_ -GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllI-A**.GvN6Z T&  <T!@vN6ZZA_|A_h.GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0/Gc T&  <T!@cZA_|A_/GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**00GP T&  <T!@PZA_qA_0GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**1Gm T&  <T!@mZA_}A_ 1GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll#F{Microsoft-W T&  <TXdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll 00ElfChnk2G_G2G_GgHidܒ.e=n WfK ? MF &0**2G! T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Te!@!ZA_}A_ 2GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**3GI3 T&  <T!@I3ZA_ ~A_` 3GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe` %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**4GI T&  <T!@IZA_7~A_ X 4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**05G T&  <T!@05GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**6Gy% T&  <T!@y% X 6GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****07Gp_ T&  <T!@p_ZA_~A_@7GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**8Gr>a T&  <T!@r>aZA_tA_ 8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**9Gha T&  <T!@haZA_xA_ 9GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**:Ga T&  <T!@aZA_oA_ :GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll6**;Gde T&  <T!@deZA_0A_ ;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllm\N**GA T&  <T!@AZA_{A_h <>GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllC**0?GR T&  <T!@RZA_A_D?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllQ 0**@Gi( T&  <T!@i(ZA_A_@@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**AGQ T&  <T!@QZA_A_@AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**BG T&  <T!@ZA_A_d  BGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exed %SYSTEMROOT%\System32\wbem\dnsclientcim.dll\ts**CGCpx T&  <T!@CpxZA_A_@ CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0DGy{ T&  <T!@y{ZA_A_ DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**0EGx T&  <T!@xZA_A_EGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FG]' T&  <T!@]'ZA_8A_FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllG**GG4 T&  <T!@4ZA_ʅA_GGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**HG1 T&  <T!@1ZA_IA_ HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllll**IG륐 T&  <T!@륐ZA_A_  IGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0JGoxS. T&  <T!@oxS.ZA_A_4JGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**KGI5; T&  <T!@I5;ZA_A_  KGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll3**0LG)Jx T&  <T!@)JxZA_A_4LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll~0**MG(y T&  <T!@(yZA_A_MGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll****NGy T&  <T!@yZA_A_NGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlld**OGYz T&  <T!@YzZA_ A_OGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**PG{g^} T&  <T!@{g^}ZA_A_0PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe0%SYSTEMROOT%\System32\wbem\dnsclientcim.dll\ts**QGQN T&  <T!@QNZA_зA_ QGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltTC**0RGgH T&  <T!@gHZA_зA_4RGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllls0**SG'y T&  <T!@'yZA_зA_ SGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0TGx+ T&  <T!@x+ZA_A_@ TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllP)J0**UGo5 T&  <T!@o5ZA_{A_` UGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dlli.d**VG5 T&  <T!@5ZA_[ T&  <T!@>[D;A@ t1GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll**02G-=\ T&  <T!@-=\U < 2GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**3GJ \ T&  <T!@J \U  3GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**04G+ÿ)\ T&  <T!@+ÿ)\U p4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsche0**5G:\ T&  <T!@:\DA 5GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllm\d**6GlY;\ T&  <T!@lY;\DB 6GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllP**7Gtfr;\ T&  <T!@tfr;\D5B,@ 7GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe,%SYSTEMROOT%\System32\wbem\dnsclientcim.dllot%**8Gd7j\ T&  <T!@d7j\D< 8GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dlltem**09G\ T&  <T!@\D@B9GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllPIP.0**:G\ T&  <T!@\D@B :GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllapt**;GW[\ T&  <T!@W[\D ;GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllm\d**Gq] T&  <T!@q]DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exed%SYSTEMROOT%\System32\wbem\dnsclientcim.dll2\w**?Gi6o7] T&  <T!@i6o7]D ?GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\wb**@G,Y}] T&  <T!@,Y}]DH H@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0AGRa] T&  <T!@Ra]D AGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllient0**BGX'] T&  <T!@X']Dt BGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllmiP**CGBJ] T&  <T!@BJ]DGt CGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll%**DG] T&  <T!@]DL t DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll2\w**EGTd] T&  <T!@Td]D EGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\wb**FG46e0^ T&  <T!@46e0^D FGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0GG0B^ T&  <T!@0B^DGGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsche0**HG)y^ T&  <T!@)y^Dt HGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllm\d**IGyz^ T&  <T!@yz^D[It IGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllP**JGOz^ T&  <T!@Oz^DJt JGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exet %SYSTEMROOT%\System32\wbem\dnsclientcim.dllot%**KG^ T&  <T!@^D98 < KGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dlltem**LG^ T&  <T!@^D9 LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem3**0MGY^ T&  <T!@Y^D9MGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldapt0**NGS+_ T&  <T!@S+_DNGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllm\d**OG7y+_ T&  <T!@7y+_DKOGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**PGe+_ T&  <T!@e+_DKPGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**QGwxW_ T&  <T!@wxW_"PU- QGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dlloso**RG(Y_ T&  <T!@(Y_P6bUBL RGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dllWher**SGc*Y_ T&  <T!@c*Y_P6bUBL SGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dll6F**(TGc*Y_ T&  <T!@c*Y_ZA_~A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational Em>B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .3 ClientMachine _User 2&?ClientProcessId &_} Component &g Operation (J ResultCode .xb PossibleCause N{4F727D4B-CE6F-4C8F-B362-F8B40F9AC060}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**UGc*Y_ T&  <T!@c*Y_ZA_A_UGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N{2F611E1E-ED16-484C-B459-E1C2FDD362E3}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownic**VGc*Y_ T&  <T!@c*Y_ZA_eA_VGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N{3C716623-AC07-4AB4-89C1-B799188E544A}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown|**WG;Y_ T&  <T!@;Y_ZA_eA_WGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N{EEBB0407-DF87-4CF8-9850-228FA8D7D46B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**XG;Y_ T&  <T!@;Y_ZA_A_XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N{0B6DD217-45CA-42E6-B642-2C5E2807A57F}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**YG;Y_ T&  <T!@;Y_ZA_A_YGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N{695D18BE-E4E3-44F0-A98A-66ED758B3D82}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowndo**ZGFY_ T&  <T!@FY_ZA_~A_ZGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational N{F7149438-F7C3-4336-921B-A0A683AD3A7A}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown** [G7RY_ T&  <T!@7RY_ZA_~A_ [GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllSYS **\GJY_ T&  <T!@JY_ZA_~A_$\GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe$C:\Windows\System32\wbem\WmiPerfClass.dllC**]GZ_ T&  <T!@Z_ZA_~A_$]GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe$%systemroot%\system32\wbem\wmiprov.dllE**^G33i_ T&  <T!@33i_ZA_~A_H X ^GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllPer** _G.`o_ T&  <T!@.`o_ZA_~A_ _GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllwmi **0`G "Zq_ T&  <T!@ "Zq_ZA_A_ `GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%sy0emroot%\syst T&  <Ts@ȱ~_ZA_$A_ aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal ElfChnkaGGaGG8s =WfSK ? 8MF v!&0**aGȱ~_ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TQ!@ȱ~_ZA_$A_ aGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllpr**bGϞ~_ T&  <T!@Ϟ~_ZA_HA_ bGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll.**cGf&h_ T&  <T!@f&h_ZA_A_ cGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**dG)x_ T&  <T!@)x_ZA_A_H X dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllem3**8eGᯟ_ T&  <T!@ᯟ_ZA_eA_ eGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational !Em>B3 ?+AHn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .3 ClientMachine S_User 2v?ClientProcessId &} Component &Hg Operation ( J ResultCode .8xb PossibleCause N({41D4975A-F95F-0001-6597-D4415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEM<UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystemProduct2Unknown8**fG_ T&  <T!@_ZA_eA_ fGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational !N({41D4975A-F95F-0000-C197-D4415FF9DC01}FILF-APP-RECNT AUTHORITY\SYSTEM<UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor2UnknownSYS**0gG_ T&  <T!@_ZA_՛A_gGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**hG%_ T&  <T!@%_ZA_'A_L hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeL%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**iG rd` T&  <T!@ rd`ZA_A_ hiGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0jGGF` T&  <T!@GF`ZA_pA_jGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**kG\H` T&  <T!@\H`ZA_pA_L \ kGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll2\w**lGʲ_` T&  <T!@ʲ_`ZA_ɝA_ lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllSys**mG]_` T&  <T!@]_`ZA_1A_ mGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**nG+rK`` T&  <T!@+rK``ZA_A_nGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**0oG5` T&  <T!@5`ZA_A_ oGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**pG` T&  <T!@`dpGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**0qG` T&  <T!@`ZA_JA_,qGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**rG %` T&  <T!@ %`ZA_JA_4rGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll2\w**sGقa T&  <T!@قaZA_A_ sGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllOOT**tGǤa T&  <T!@ǤaZA_A_ tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**uGBqa T&  <T!@BqaZA_cA_T uGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeT %SYSTEMROOT%\System32\wbem\dnsclientcim.dlltem**vGga T&  <T!@gaZA_A_ lvGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.ex**0wGa T&  <T!@aZA_A_lwGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**xGt,a T&  <T!@t,aZA_bA_dxGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllsys**yGTa T&  <T!@TaZA_A_dyGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**zGa T&  <T!@aZA_A_dzGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll3**{G&\a T&  <T!@&\aZA_A_  {GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll2\w**|Gj:a T&  <T!@j:aZA_yA_4 |GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll**}G2 b T&  <T!@2 bZA_yA_,}GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0~Gz^b T&  <T!@z^bZA_A_, ~GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**G5#ab T&  <T!@5#abZA_A_8P GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll2\w**Glb T&  <T!@lbZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllSys**G8lb T&  <T!@8lbZA_ʣA_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**Ghvlb T&  <T!@hvlbZA_A_(GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe(%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G2b T&  <T!@2bZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0G`c T&  <T!@`cZA_`A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**Gc T&  <T!@cZA_`A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**G/c T&  <T!@/cZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllOOT**GHc T&  <T!@HcZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**G/yc T&  <T!@/ycZA_HA_xGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exex%SYSTEMROOT%\System32\wbem\dnsclientcim.dlltem**GBc T&  <T!@BcPU- pGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.ex**0Gnp2c T&  <T!@np2cZA_ܩA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**Gc T&  <T!@cZA_ܩA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem3**G+c T&  <T!@+cZA_@A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll\sy**GAc T&  <T!@AcZA_ A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**Gc T&  <T!@cZA_A_@GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllm**GFc T&  <T!@FcZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dll**GnBd T&  <T!@nBdZA_A_ 4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0Gwd T&  <T!@wdZA_A_l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**G˓yd T&  <T!@˓ydZA_A_d GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll2\w**G_d T&  <T!@_dZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllSys**G*d T&  <T!@*dZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**G"d T&  <T!@"dZA_հA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G)Bd T&  <T!@)BdZA_&A_ <GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0G)e T&  <T!@)eZA_`A_DGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\wb0**G5 g,e T&  <T!@5 g,eZA_`A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**GvX9e T&  <T!@vX9eZA_PA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllOOT**Gl~9e T&  <T!@l~9eZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**G9e T&  <T!@9eZA_tA_ LGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dlltem**G0e T&  <T!@0eZA_ݳA_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll.ex**0G|e T&  <T!@|eZA_A_p GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**Gl3e T&  <T!@l3eZA_A_4GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllem3**G2e T&  <T!@2eZA_'A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll\sy**GܠWe T&  <T!@ܠWeZA_~A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlls**Ge T&  <T!@eZA_صA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllm**G/e T&  <T!@/eZA_A_hGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exeh%SYSTEMROOT%\System32\wbem\dnsclientcim.dll**G;Qf T&  <T!@;QfZA_BA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0Gurf T&  <T!@urfZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle0**Gf T&  <T!@fZA_2A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllsys**GyҚf T&  <T!@yҚfZA_A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllm**GEf T&  <T!@EfZA_A_ h GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllEMR**Gf T&  <T!@fZA_NA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**Ga0f T&  <T!@a0fZA_NA_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllv**0GHBg T&  <T!@HBgZA_-A_@ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll:\Wi0**GϔDg T&  <T!@ϔDgZA_-A_  GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemr**GMg T&  <T!@MgZA_A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll%sy**GAMg T&  <T!@AMgZA_A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**GeNg T&  <T!@eNgZA_jA_ L GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe %SYSTEMROOT%\System32\wbem\dnsclientcim.dllSYS**GĎg T&  <T!@ĎgPU-( XGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllC**0Gb9g T&  <T!@b9gZA_ڼA_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**GXg T&  <T!@XgZA_A_PGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll.ex**Gg T&  <T!@gZA_DA_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll**G<#g T&  <T!@<#gZA_ƽA_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dlly**Gtg T&  <T!@tgZA_A_H GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dllS**Gg T&  <T!@gZA_|A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll\Wi**GSQdh T&  <T!@SQdhZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0G'Wh T&  <T!@'WhZA_ܰA_tGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle0**Grh T&  <T!@rhZA_ܰA_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemr**GIEh T&  <T!@IEhZA_A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll%sy**G?xhh T&  <T!@?xhhZA_A_TGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dllS**Gmֱh T&  <T!@mֱhZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dll\Wi**GPE(+i T&  <T!@PE(+iZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0GZi T&  <T!@ZiZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle0**GC]i T&  <T!@C]iZA_A_ lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemr**GIdi T&  <T!@IdiZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll%sy**G}=di T&  <T!@}=diZA_:A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**Gydi T&  <T!@ydiZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllemr**G$i T&  <T!@$iZA_1A_ dGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllot%**0G j T&  <T!@ jZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcima0**G\7j T&  <T!@\7jZA_A_ l GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**Gj T&  <T!@jZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dll40**G8j T&  <T!@8jZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ZNetAdapterCimwmiprvse.exe%systemroot%\system32\wbem\NetAdapterCim.dll**G`j T&  <T!@`jZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000$RScheduledTaskProvwmiprvse.exe%SYSTEMROOT%\System32\wbem\schedprov.dll**Gl;j T&  <T!@l;jZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Xdnsclientcimwmiprvse.exe%SYSTEMROOT%\System32\wbem\dnsclientcim.dllMet**0Gz' Cj T&  <T!@z' CjZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GOj T&  <T!@OjZA_A_lGMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**Gxj T&  <T!@xjZA_A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllang**0G,j T&  <T!@,jZA_A_GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllder0**Gevj T&  <T!@evjZA_?A_ GMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Pnettcpipwmiprvse.exe%systemroot%\system32\wbem\NetTCPIP.dllows**G'