ElfFile +@lElfChnkH@@H@@XȒU=n WfK ? MF &0**H@Q5 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@Q5P H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll.d**0I@KQ5 T&  <T!@KQ5P xI@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllQ0**J@R5 T&  <T!@R5P J@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllkL**K@͉PR5 T&  <T!@͉PR5P4 K@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**0L@AR5 T&  <T!@AR5P L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll {:0**M@VR5 T&  <T!@VR5PL M@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll**N@nR5 T&  <T!@nR5P(N@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllfgw**O@#S5 T&  <T!@#S5P(O@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0P@yJS5 T&  <T!@yJS5P P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**0**Q@[}S5 T&  <T!@[}S5P|Q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllh@**R@bS5 T&  <T!@bS5$xR@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**0S@CS5 T&  <T!@CS5 S@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**T@>i6T5 T&  <T!@>i6T5 <T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**U@iT5 T&  <T!@iT5 U@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0V@%T5 T&  <T!@%T5  V@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**W@/T5 T&  <T!@/T58W@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll@**X@U5 T&  <T!@U5 X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllo@**0Y@bU5 T&  <T!@bU5  Y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**Z@dEȫU5 T&  <T!@dEȫU5@Z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllq@**[@̿U5 T&  <T!@̿U5 [@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllr@**0\@oV5 T&  <T!@oV5  \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**]@wGV5 T&  <T!@wGV5 $ ]@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt@**^@ZΜV5 T&  <T!@ZΜV5^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllu@**0_@wz{V5 T&  <T!@wz{V5 `_@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**`@&W5 T&  <T!@&W5`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllw@**a@RW5 T&  <T!@RW5a@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllx@**0b@F{W5 T&  <T!@F{W5 0b@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**c@kW5 T&  <T!@kW5( c@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllz@**d@^bEW5 T&  <T!@^bEW5 Pd@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0e@ .X5 T&  <T!@ .X5 P `e@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**f@xWuX5 T&  <T!@xWuX5 Pf@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll}@**0g@sX5 T&  <T!@sX5 P g@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**h@FZY5 T&  <T!@FZY5 P dh@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**i@&ǓLY5 T&  <T!@&ǓLY5 P0xi@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll@**0j@Y5 T&  <T!@Y5 P 0 j@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**k@Y5 T&  <T!@Y5 PHk@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**l@TY5 T&  <T!@TY5 P l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0m@>|OZ5 T&  <T!@>|OZ5 P m@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**n@N?{Z5 T&  <T!@N?{Z5 Pn@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**o@AZ5 T&  <T!@AZ5 P0o@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll@**0p@JZ5 T&  <T!@JZ5 P  p@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**q@2[5 T&  <T!@2[5 P dq@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**r@j?e[5 T&  <T!@j?e[5 Pr@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0s@[5 T&  <T!@[5 P s@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**t@ i,[5 T&  <T!@ i,[5 Pl t@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**u@y \5 T&  <T!@y \5H u@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll@**0v@_\5 T&  <T!@_\5 tv@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**w@\5 T&  <T!@\5TH w@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**x@\5 T&  <T!@\5L x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0y@i]5 T&  <T!@i]5 y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**z@-R]5 T&  <T!@-R]5 z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**{@+%+~]5 T&  <T!@+%+~]5h{@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0|@$·]5 T&  <T!@$·]5 |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**}@.=]5 T&  <T!@.=]5@ d}@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll**~@J0^5 T&  <T!@J0^5( ~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll@**0@4mw^5 T&  <T!@4mw^5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@^5 T&  <T!@^5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@B^5 T&  <T!@B^5 T @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@{$*_5 T&  <T!@{$*_5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@^b_5 T&  <T!@^b_5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**@mge_5 T&  <T!@mge_5PL <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll.**@_5 T&  <T!@_5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0@z_5 T&  <T!@z_5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**@?`5 T&  <T!@?`5Pp @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllst.**@xH`5 T&  <T!@xH`5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0@`5 T&  <T!@`5P d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**@e`5 T&  <T!@e`5PD@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllst.**@!H`5 T&  <T!@!H`5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0@;Ba5 T&  <T!@;Ba5P H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**@*Mgua5 T&  <T!@*Mgua5P , @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**@~ra5 T&  <T!@~ra5Pd D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllsys**0@u\a5 T&  <T!@u\a5P 8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**@^;b5 T&  <T!@^;b5PH@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllst.**@Tj;ab5 T&  <T!@Tj;ab5PH0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllsys**0@rL/b5 T&  <T!@rL/b5P 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**@^b5 T&  <T!@^b5P$X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllsys**@+c5 T&  <T!@+c5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0@Zc5 T&  <T!@Zc5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlllD0**@~:Kc5 T&  <T!@~:Kc5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@!c5 T&  <T!@!c5PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@3 d5 T&  <T!@3 d5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@?@d5 T&  <T!@?@d5Pd @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@d5 T&  <T!@d5 | @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@vOd5 T&  <T!@vOd5  l @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@Bd5 T&  <T!@Bd5  h @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@8w,e5 T&  <T!@8w,e5 L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@_se5 T&  <T!@_se5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@cRe5 T&  <T!@cRe5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@Ve5 T&  <T!@Ve5 xh@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@.,&f5 T&  <T!@.,&f5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@C_f5 T&  <T!@C_f5 \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**@!rf5 T&  <T!@!rf5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ f5 T&  <T!@ f5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@]g5 T&  <T!@]g5  d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@Dg5 T&  <T!@Dg5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@;ޕg5 T&  <T!@;ޕg5  l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@+yg5 T&  <T!@+yg5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@y4g5 T&  <T!@y4g5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ >h5 T&  <T!@ >h5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\w0**@quh5 T&  <T!@quh500@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**@V+8h5 T&  <T!@V+8h500 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ydh5 T&  <T!@ydh5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllwbe0**@Q.i5 T&  <T!@Q.i50@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**@2ki5 T&  <T!@2ki50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@i5 T&  <T!@i50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0**@7Pi5 T&  <T!@7Pi500 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@B'j5 T&  <T!@B'j50(0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@Wj5 T&  <T!@Wj50 ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0**@j5 T&  <T!@j500 ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@+Dj5 T&  <T!@+Dj50`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ k5 T&  <T!@ k50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0**@a}'?k5 T&  <T!@a}'?k50@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**@Pvk5 T&  <T!@Pvk50\ x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@Ck5 T&  <T!@Ck50 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0**@@{l5 T&  <T!@@{l50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@q}(l5 T&  <T!@q}(l50 4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@g/ol5 T&  <T!@g/ol50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0fInst.dllt T&  <T@Al50L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Operational ElfChnk@1@@1@hx4(b=n WfK ? MF &0**@Al5 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@Al50L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll.d**@l[l5 T&  <T!@l[l50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@L="m5 T&  <T!@L="m5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllkL0**@}]m5 T&  <T!@}]m5D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dlll**@6Km5 T&  <T!@6Km5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@6#m5 T&  <T!@6#m5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllN@0**@2n5 T&  <T!@2n5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllO@**@GAn5 T&  <T!@GAn5(H @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllP@**0@ևn5 T&  <T!@ևn5 \ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllQ@0**@q!n5 T&  <T!@q!n58 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllR@**@n5 T&  <T!@n58 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllS@**0@Z:o5 T&  <T!@Z:o5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllT@0**@qno5 T&  <T!@qno5\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllU@**@ᣦo5 T&  <T!@ᣦo5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllV@**0@yuo5 T&  <T!@yuo5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllW@0**@*%p5 T&  <T!@*%p5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllX@**@jYp5 T&  <T!@jYp5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllY@**0@U@p5 T&  <T!@U@p5 h @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllZ@0**@_p5 T&  <T!@_p5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll[@**@\. q5 T&  <T!@\. q5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\@**0@Sq5 T&  <T!@Sq5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll]@0**@Wq5 T&  <T!@Wq5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll^@**@'q5 T&  <T!@'q5P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_@**0@r5 T&  <T!@r5P 4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll`@0**@BV7r5 T&  <T!@BV7r5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlla@**@qr5 T&  <T!@qr5PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllb@**0@eȮr5 T&  <T!@eȮr5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllc@0**@Z'r5 T&  <T!@Z'r5Ph @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dlld@**@%s5 T&  <T!@%s5P( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlle@**0@ks5 T&  <T!@ks5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllf@0**@ays5 T&  <T!@ays5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllg@**@zs5 T&  <T!@zs5P x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@Ut5 T&  <T!@Ut5P x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlli@0**@2yVt5 T&  <T!@2yVt5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllj@**@)Gt5 T&  <T!@)Gt5Pl @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@t5 T&  <T!@t5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlll@0**@C$u5 T&  <T!@C$u5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllm@**@3=@u5 T&  <T!@3=@u5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@u5 T&  <T!@u5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllo@0**@䤼u5 T&  <T!@䤼u5P` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllp@**@_Au5 T&  <T!@_Au5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@ɾ6v5 T&  <T!@ɾ6v5P 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllr@0**@Fxv5 T&  <T!@Fxv5Pl @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dlls@**@v5 T&  <T!@v5P<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@y"v5 T&  <T!@y"v5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllu@0**@q@!w5 T&  <T!@q@!w5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllv@**@ҶUw5 T&  <T!@ҶUw5P( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@Mw5 T&  <T!@Mw5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllx@0**@w5 T&  <T!@w5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlly@**@ x5 T&  <T!@ x5P D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@oOx5 T&  <T!@oOx5P X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll{@0**@ ~x5 T&  <T!@ ~x5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll|@**@\\x5 T&  <T!@\\x5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0@߲y5 T&  <T!@߲y5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll~@0**@?Q5 T&  <T!@>?Q5  P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**@N5 T&  <T!@N5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@J5 T&  <T!@J5  8 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@1ɂ5 T&  <T!@1ɂ5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**@mo5 T&  <T!@mo5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@^75 T&  <T!@^75 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@T|5 T&  <T!@T|5   @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50** @}ൃ5 T&  <T!@}ൃ5   @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**!@35 T&  <T!@35  h!@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0"@O,.5 T&  <T!@O,.5   "@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**#@fa5 T&  <T!@fa5  #@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**$@Pc5 T&  <T!@Pc5  $@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%@ 5 T&  <T!@ 5   %@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**&@;'5 T&  <T!@;'5  &@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**'@@N5 T&  <T!@@N5  '@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(@*n5 T&  <T!@*n5   (@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**)@ƅ5 T&  <T!@ƅ5 )@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll***@,!5 T&  <T!@,!5 P*@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0+@5G5 T&  <T!@5G5  +@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**,@05 T&  <T!@05  l ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**-@*35 T&  <T!@*35  x-@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0.@G5 T&  <T!@G5  H.@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**/@+5 T&  <T!@+5  l /@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@Q^h5 T&  <T!@Q^h5 L 40@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll**1@vu5 T&  <T!@vu5  1@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.dmiP0fIns T&  <T@Ҭ5  2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFational ElfChnk2@@2@@V?n1j='iFijWf{iK ? `jMF iiIh&0**2@Ҭ5 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@Ҭ5  2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**3@5 T&  <T!@5 3@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**4@{5 T&  <T!@{5 44@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllkL**05@_5 T&  <T!@_5  (5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**6@ӲJ5 T&  <T!@ӲJ5  6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**7@J̈5 T&  <T!@J̈5 ` l 7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllN@**08@@ x5 T&  <T!@ x5  >@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**?@$5 T&  <T!@$5T?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**@@5 T&  <T!@5h @@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllW@**0A@*5 T&  <T!@*5 A@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**B@ۤ\5 T&  <T!@ۤ\5 B@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**C@y5 T&  <T!@y5C@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllZ@**0D@> ݋5 T&  <T!@> ݋5 D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**E@5 T&  <T!@5 E@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**F@WrY5 T&  <T!@WrY5 F@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll]@**0G@x5 T&  <T!@x5 `G@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**H@&5 T&  <T!@&5( H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll**I@u5 T&  <T!@u5 I@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll`@**0J@NC5 T&  <T!@NC5 l J@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**K@lz5 T&  <T!@lz5 K@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**L@1V5 T&  <T!@1V50 L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllc@**0M@5 T&  <T!@5 DM@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**N@,f)5 T&  <T!@,f)5T N@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**O@\8b5 T&  <T!@\8b5 O@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllf@**0P@a⨎5 T&  <T!@a⨎5 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**Q@tm5 T&  <T!@tm5! Q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**R@<5 T&  <T!@<5! R@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli@**0S@Ve5 T&  <T!@Ve5!  S@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**T@.@⎏5 T&  <T!@.@⎏5!\ T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**U@-@(ɏ5 T&  <T!@-@(ɏ5! U@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll@**0V@|5 T&  <T!@|5! xV@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**W@JF5 T&  <T!@JF5! W@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**X@rz5 T&  <T!@rz5! tX@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllo@**0Y@Z5 T&  <T!@Z5! @Y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll50**Z@5 T&  <T!@5!dL Z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**[@'>;5 T&  <T!@'>;5!|D[@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllr@**\@Jd5 T&  <T!@Jd5Pao(8\@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe(%systemroot%\system32\wbem\cimwin32.dllLSE**]@e5 T&  <T!@e5bsB8(8]@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe(%systemroot%\system32\wbem\wmipcima.dllWM**^@nf5 T&  <T!@nf5bsB8(<^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe(%SystemRoot%\System32\smbwmiv2.dllRWm**(_@.f5 T&  <T!@.f5bsB8_@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IhEm>B3 ?+Aphn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI'i[Id .Fi3 ClientMachine {i_User 2i?ClientProcessId &i} Component &jphg Operation (1jJ ResultCode .`jxb PossibleCause N{9A35BD71-6B8D-47C7-8164-AC69C4E32219}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**`@C0f5 T&  <T!@C0f5bsB8P`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IhN{0D15160B-F311-46C1-B707-FF84B86F5A97}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownro**a@E3f5 T&  <T!@E3f5bsB8a@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IhN{FB5E2F54-64C1-4EAB-991A-78BC248F9638}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownys**b@l:f5 T&  <T!@l:f5LE|_5E|_5xb@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IhN{5330FC9E-258E-4DC5-83BE-23D0A0D11E29}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownU**c@5 T&  <T!@>5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0@o`5 T&  <T!@o`5Pao(L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@xc'5 T&  <T!@xc'5Pao `@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloft**@:}HR5 T&  <T!@:}HR5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll060**0@k65 T&  <T!@k65Pao($ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllindo0**@*Ԫ5 T&  <T!@*Ԫ5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**@?5 T&  <T!@?5PaoL @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0@;hK5 T&  <T!@;hK5Pao(H @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllMI-A0**@ŚH5 T&  <T!@ŚH5PaoP,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllndo**@x巫5 T&  <T!@x巫5Pao0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0@5 T&  <T!@5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll50**@ؿ;5 T&  <T!@ؿ;5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllSt**@x5 T&  <T!@x5PaoD @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0@_5 T&  <T!@_5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll_50**@$5 T&  <T!@$5Pao8 ` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll32_**@5 T&  <T!@5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@~ld5 T&  <T!@~ld5Pao(4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@cϝ5 T&  <T!@cϝ5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**@bЭ5 T&  <T!@bЭ5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@945 T&  <T!@945Pao(L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@6S5 T&  <T!@6S5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**@r5 T&  <T!@r5Pao H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@v ʮ5 T&  <T!@v ʮ5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@ 5 T&  <T!@ 5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**@E55 T&  <T!@E55Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@/|5 T&  <T!@/|5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@O:5 T&  <T!@O:5Pao,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**@\5 T&  <T!@\5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@/5 T&  <T!@/5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@Lk5 T&  <T!@Lk5PaoD @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dlltem**@)5 T&  <T!@)5Pao h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@~5 T&  <T!@~5Pao(|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@-q5 T&  <T!@-q5Pao@ X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dlltem**@#[5 T&  <T!@#[5Pao P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@f'@5 T&  <T!@f'@5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@VOϱ5 T&  <T!@VOϱ5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**@5 T&  <T!@5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@FH5 T&  <T!@FH5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@a ~5 T&  <T!@a ~5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**@5 T&  <T!@5Pao` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@5 T&  <T!@5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@55 T&  <T!@55Pao d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**@Hf5 T&  <T!@Hf5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@ u'5 T&  <T!@ u'5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@5 T&  <T!@5Pao\0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dlltem**@k5 T&  <T!@k5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@ljF`5 T&  <T!@ljF`5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@5 T&  <T!@5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**@\k̴5 T&  <T!@\k̴5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@K5 T&  <T!@K5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@5oI5 T&  <T!@5oI5Pao l @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**@H25 T&  <T!@H25Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0 @*MƵ5 T&  <T!@*MƵ5Pao(X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0** @5 T&  <T!@5Pao h @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem** @?5 T&  <T!@?5Pao  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0 @ x5 T&  <T!@ x5Pao(d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0** @C$ 5 T&  <T!@C$ 5Pao\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**@m5 T&  <T!@m5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0@845 T&  <T!@845Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@`3h5 T&  <T!@`3h5@ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dlltem**@Su5 T&  <T!@Su5@ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dlltem**0@8~޷5 T&  <T!@8~޷5( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlloot%0**@5 T&  <T!@5L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**@B3 ?+Apn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI'[Id .F3 ClientMachine {_User 2?ClientProcessId &} Component &pg Operation (1J ResultCode .`xb PossibleCause N({5F7C454C-3591-0000-8545-7C5F9135DB01}FILF-APP-RECNT AUTHORITY\SYSTEMxUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '0'2UnknownMH**0@r5 T&  <T!@r5LE|_5E|_5(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**@D25 T&  <T!@D25LE|_5E|_5T @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll{M**@/b5 T&  <T!@/b5LE|_5E|_5$ X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll{M**0 @65 T&  <T!@65LE|_5E|_5( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**!@U0޺5 T&  <T!@U0޺5LE|_5E|_5 !@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**"@O5 T&  <T!@O5LE|_5E|_5 "@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0#@u\5 T&  <T!@u\5LE|_5E|_5(#@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**$@ 5 T&  <T!@ 5 Paoh$@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**%@KqȻ5 T&  <T!@KqȻ5 Pao%@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0&@wU5 T&  <T!@wU5 Pao( &@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**'@(aD5 T&  <T!@(aD5 Pao` '@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll{M**(@ ZY{5 T&  <T!@ ZY{5 Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0)@A¼5 T&  <T!@A¼5 Pao()@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0***@# 5 T&  <T!@# 5 Pao*@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**+@-5 T&  <T!@-5 Pao+@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**,@owǽ5 T&  <T!@owǽ5 Pao@,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0-@E,5 T&  <T!@E,5 Pao( -@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**.@RTs5 T&  <T!@RTs5 Pao8 .@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll{M**0/@5 T&  <T!@5 Pao(`/@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**0@Au5 T&  <T!@Au5 Pao 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**01@k5 T&  <T!@k5 Pao(`1@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**2@kȿ5 T&  <T!@kȿ50 2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**03@5 T&  <T!@5Pao(3@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**4@\}5 T&  <T!@\}5Pao 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllows**05@sx5 T&  <T!@sx5Pao(5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**6@0-5 T&  <T!@0-5Pao X 6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**7@ ;5 T&  <T!@ ;5Pao 7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloft**08@pU5 T&  <T!@pU5Pao(t8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllsoft0**9@w.5 T&  <T!@w.5PaoX 9@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0:@Y?5 T&  <T!@Y?5Pao(:@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**;@V5 T&  <T!@V5Pao< ;@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dlloft**0<@5 T&  <T!@5Pao( <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**=@dH5 T&  <T!@dH5Pao ( =@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0>@5 T&  <T!@5Pao(>@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**?@"!5 T&  <T!@"!5Pao , ?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@@Y 5 T&  <T!@Y 5P@\ @@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllows**0A@N5 T&  <T!@N5P(\ A@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**B@%[5 T&  <T!@%[5PB@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0C@:5 T&  <T!@:5P(HC@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlly/Op0**D@P[5 T&  <T!@P[5PX D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllows**0E@5 T&  <T!@5P(E@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlly/Op0**F@mo5 T&  <T!@mo5Ph F@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0G@f5 T&  <T!@f5P( G@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlly/Op0**H@G5 T&  <T!@G5P H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**I@>5 T&  <T!@>5P I@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0J@5 T&  <T!@5P(T J@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**K@Xu5 T&  <T!@Xu5P K@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0L@x5 T&  <T!@x5P(HL@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlliona0**M@'5 T&  <T!@'50`M@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0N@C5 T&  <T!@C5 P( N@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlliona0**O@_y5 T&  <T!@_y5 PL O@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllona**0P@J35 T&  <T!@J35 P(, P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlliona0**Q@寏5 T&  <T!@寏5 P Q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**R@ D5 T&  <T!@ D5 PR@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0S@{s5 T&  <T!@{s5 P( S@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlly/Op0**T@Nf@5 T&  <T!@Nf@5 P T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0U@Gh5 T&  <T!@Gh5 P(dU@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll00**V@;5 T&  <T!@;5 PD V@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0W@J5 T&  <T!@J5 P(W@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll00**X@W/5 T&  <T!@W/5 Ph X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll**Y@b5 T&  <T!@b5 P(Y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe(%systemroot%\system32\wbem\wmipcima.dllit**Z@O5 T&  <T!@O5 P(Z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe(%SystemRoot%\System32\sppwmi.dllWMI**0[@2o5 T&  <T!@2o5 P(8[@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllerat0**\@ ]5 T&  <T!@ ]5 P @ \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlln**]@SNk5 T&  <T!@SNk5 ]@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0^@BvT5 T&  <T!@BvT5( ^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllivit0**_@@5 T&  <T!@@5t_@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllWin**0`@b5 T&  <T!@b5( `@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllivit0**a@]5 T&  <T!@]5 | a@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0b@뿨5 T&  <T!@뿨5( b@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllivit0**c@)u5 T&  <T!@)u5 @c@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0d@_]5 T&  <T!@_]5(Dd@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**e@*)5 T&  <T!@*)5 e@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllI**f@ Z75 T&  <T!@ Z75P f@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0g@K{5 T&  <T!@K{5(X g@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllerat0**h@db5 T&  <T!@db5h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0i@m.5 T&  <T!@m.5(i@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllerat0**j@* ։5 T&  <T!@* ։5 j@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**0k@y5 T&  <T!@y5P(k@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllerat0**l@ B5 T&  <T!@ B5Pl@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**0m@Zœ5 T&  <T!@Zœ5P(\ m@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllB0**n@65 T&  <T!@65P n@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**o@S5 T&  <T!@S5Phlo@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllvit**0p@G5 T&  <T!@G5P( p@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**q@Nî5 T&  <T!@Nî5Ph dq@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllvit**0r@5 T&  <T!@5P(tr@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**s@bW5 T&  <T!@bW5P s@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**0t@ '5 T&  <T!@ '5/0(tt@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**u@5 T&  <T!@5/0p lu@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll 00**0v@"_5 T&  <T!@"_5/0(tv@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllFWi0**w@85 T&  <T!@85/0 ` w@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**x@5 T&  <T!@5/0,lx@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllrat**0y@T5 T&  <T!@T5Pao(y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllB0**z@4$En5 T&  <T!@4$En5Pao z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**0{@p5 T&  <T!@p5Pao(|{@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**|@bl$5 T&  <T!@bl$5Pao 0 |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0}@ Xw5 T&  <T!@ Xw5Pao(p}@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**~@۴5 T&  <T!@۴5Pao~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@J*5 T&  <T!@J*5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllWIN30**@4{b5 T&  <T!@4{b5LE|_5T~|_5(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe(%systemroot%\system32\wbem\wfascim.dll0**@5 T&  <T!@5LE|_5,|_5 x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**@y5 T&  <T!@y5LE|_5,|_5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**0@5 T&  <T!@5LE|_5,|_5(|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllerat0**@:5 T&  <T!@:5LE|_5,|_5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**0@İ/5 T&  <T!@İ/5LE|_5,|_5(|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllB0**@Д5 T&  <T!@Д5LE|_5,|_5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**0@eB5 T&  <T!@eB5(|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@oŢ5 T&  <T!@oŢ5| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll**0@X^5 T&  <T!@X^5(,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0NWMIProv T&  <T\w@uT5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nivity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal ElfChnk@@@@x ά`m"=n WfK ? MF &0**x@uT5 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TM!@uT5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllx**@a5 T&  <T!@a5 |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0@G5 T&  <T!@G5( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllmi.d0**@i 5 T&  <T!@i 5D P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllst.**0@\5 T&  <T!@\5(h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll@0**@nѹ5 T&  <T!@nѹ5`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll06/**0@% 5 T&  <T!@% 5(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllY\S0**@tu5 T&  <T!@tu5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0@φ5 T&  <T!@φ5(P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllsoft0**@Z 5 T&  <T!@Z 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllM**@c.5 T&  <T!@c.5( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@ls5 T&  <T!@ls5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ{M0**@j5 T&  <T!@j5PaoD @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@Pё'5 T&  <T!@Pё'5Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@̓5 T&  <T!@̓5Pao@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@4R5 T&  <T!@4R5Pao(L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@3h85 T&  <T!@3h85Paot@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0@.Ӌ5 T&  <T!@.Ӌ5Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@E.5 T&  <T!@E.5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**@[@5 T&  <T!@[@5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloft**0@{>5 T&  <T!@{>5Pao((@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllsoft0**@|5 T&  <T!@|5Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloft**0@@(5 T&  <T!@@(5"0( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@e4R5 T&  <T!@e4R5"0,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@^5 T&  <T!@^5(` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@Oi5 T&  <T!@Oi5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@(W5 T&  <T!@(W5(L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@5 T&  <T!@5 8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@x5 T&  <T!@x5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@ 5 T&  <T!@ 5( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@!i5 T&  <T!@!i5( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@l5 T&  <T!@l5(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@%5 T&  <T!@%5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@_o5 T&  <T!@_o5(H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@nt5 T&  <T!@nt5< @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@M#5 T&  <T!@M#5(d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@4 6 T&  <T!@> 6Pt,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0-@? 6 T&  <T!@? 6(-@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**.@md3 6 T&  <T!@md3 6 .@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**/@?_ 6 T&  <T!@?_ 6H /@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll{M**00@U 6 T&  <T!@U 6(0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**1@kY 6 T&  <T!@kY 6tl 1@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll{M**02@ 6 T&  <T!@ 6( 2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**3@6 T&  <T!@63@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**04@|W6 T&  <T!@|W6(4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**5@q6 T&  <T!@q65@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**06@9 6 T&  <T!@9 6( 6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**7@|v6 T&  <T!@|v6 d7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**8@6 T&  <T!@68@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**09@tc6 T&  <T!@tc6( 9@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**:@ӵ"6 T&  <T!@ӵ"6$ :@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll{M**0;@RBx6 T&  <T!@RBx6P( ;@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**<@}x6 T&  <T!@}x6P<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0=@/+6 T&  <T!@/+6P(l=@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**>@ō6 T&  <T!@ō6Ph  >@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll@**0?@c6 T&  <T!@c6P(?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@@|);6 T&  <T!@|);6P 4@@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**A@>H6 T&  <T!@>H6P A@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0B@D<6 T&  <T!@D<6P(|B@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**C@* 6 T&  <T!@* 6PtC@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0D@e;6 T&  <T!@e;6P(D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**E@6 T&  <T!@6PP E@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0F@X6G6 T&  <T!@X6G6P(F@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**G@$9T6 T&  <T!@$9T6P P G@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0H@Ke6 T&  <T!@Ke6(t H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**I@6 T&  <T!@6 I@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll0**J@U|6 T&  <T!@U|6L J@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllvit**0K@JS6 T&  <T!@JS6(K@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**L@ʷ6 T&  <T!@ʷ6 LL@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0M@w6 T&  <T!@w60(X M@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**N@Bm6 T&  <T!@Bm60 N@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0O@ y16 T&  <T!@ y160(O@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**P@N 6 T&  <T!@N 60lP@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0Q@Fm6 T&  <T!@Fm60( Q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**R@6 T&  <T!@60 R@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll0**S@ 6 T&  <T!@ 60$S@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0T@)#6 T&  <T!@)#60($T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**U@H6 T&  <T!@H60 U@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0V@E6 T&  <T!@E6( V@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**W@?86 T&  <T!@?860 lW@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllvit**0X@9Hk6 T&  <T!@9Hk6( X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**Y@O6 T&  <T!@O6 Y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllppr**0Z@7:6 T&  <T!@7:6( Z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dller.D0**[@56 T&  <T!@56 T[@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**\@! Ƴ6 T&  <T!@! Ƴ6`T \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0]@2y6 T&  <T!@2y6($ ]@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**^@R6 T&  <T!@R6P8 ^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0_@GR6 T&  <T!@GR6( _@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**`@}<6 T&  <T!@}<6 `@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0a@|R6 T&  <T!@|R6(Xa@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**b@:C6 T&  <T!@:C6P L b@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0c@q6 T&  <T!@q6(\ c@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**d@G^uj6 T&  <T!@G^uj6 8d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**e@H]x6 T&  <T!@H]x6 e@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0f@Z26 T&  <T!@Z260(,f@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**g@=%6 T&  <T!@=%60g@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0h@Br6 T&  <T!@Br60(h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**i@a'6 T&  <T!@a'60P4 i@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0j@t6 T&  <T!@t60( j@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**k@96 T&  <T!@960  k@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0l@6 T&  <T!@60( l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**m@CwX 6 T&  <T!@CwX 60 ,m@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**n@ f 6 T&  <T!@ f 600L n@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0o@e 6 T&  <T!@e 60( o@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**p@W 6 T&  <T!@W 60p@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0q@ڙy5!6 T&  <T!@ڙy5!6( q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0**r@25!6 T&  <T!@25!6,r@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0s@!6 T&  <T!@!6( s@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\sys0m32\tscfgwmi T&  <Tonal 000nal ElfChnkt@@t@@HXD}D#=n WfK ? MF &0**t@,L"6 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@,L"6t@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0u@,T"6 T&  <T!@,T"6(u@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**v@#6 T&  <T!@#6 v@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**w@=֌#6 T&  <T!@=֌#6 w@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0x@`M#6 T&  <T!@`M#6(x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll@0**y@_#6 T&  <T!@_#6P y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll06/**0z@Q$6 T&  <T!@Q$6(Lz@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllY\S0**{@Y}g$6 T&  <T!@Y}g$6 {@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloft**0|@$I\$6 T&  <T!@$I\$6( |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllsoft0**}@-%6 T&  <T!@-%6 , }@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0~@Ef%6 T&  <T!@Ef%6( ~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@%6 T&  <T!@%6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllM**@%Ld%6 T&  <T!@%Ld%6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@~&6 T&  <T!@~&6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@8&6 T&  <T!@8&6< @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@$&6 T&  <T!@$&6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@#52'6 T&  <T!@#52'6D\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllows**0@Y~'6 T&  <T!@Y~'6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@g'6 T&  <T!@g'6 d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@902(6 T&  <T!@902(6)Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@(6 T&  <T!@(6)Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**@(6 T&  <T!@(6)Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0@h(6 T&  <T!@h(6)Pao( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@zfD)6 T&  <T!@zfD)6)PaoT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@R)6 T&  <T!@R)6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@Y)6 T&  <T!@Y)6, @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@J*6 T&  <T!@J*6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@!A**6 T&  <T!@!A**6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@h*6 T&  <T!@h*6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@i+6 T&  <T!@i+6 ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@Lw+6 T&  <T!@Lw+6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@/ Y+6 T&  <T!@/ Y+6(T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@׾ ,6 T&  <T!@׾ ,6h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@ b,6 T&  <T!@ b,6(d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@f,6 T&  <T!@f,6$ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@N= -6 T&  <T!@N= -6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@Dm-6 T&  <T!@Dm-60 \ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll@**0@-6 T&  <T!@-6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@5*.6 T&  <T!@5*.6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@7.6 T&  <T!@7.6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@ bz.6 T&  <T!@ bz.6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@><.6 T&  <T!@><.6t @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@ԑ~-/6 T&  <T!@ԑ~-/6(| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@K/6 T&  <T!@K/6 8 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@s/6 T&  <T!@s/6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@!|806 T&  <T!@!|806@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@06 T&  <T!@06(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@d06 T&  <T!@d06 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@G16 T&  <T!@G16 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@='E16 T&  <T!@='E16(< @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@3=16 T&  <T!@3=16 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@ڝ16 T&  <T!@ڝ16(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@}{df26 T&  <T!@}{df26@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@R26 T&  <T!@R26( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@'D 36 T&  <T!@'D 36x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@5)_36 T&  <T!@5)_36(d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@36 T&  <T!@36 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@!R36 T&  <T!@!R36 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@đO46 T&  <T!@đO46(| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@ "j46 T&  <T!@ "j46?Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0@;46 T&  <T!@;46?Pao(| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@-}156 T&  <T!@-}156?Pao l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@SCw56 T&  <T!@SCw56?Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll-Act0**@DZ56 T&  <T!@DZ56?Pao @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@m)66 T&  <T!@m)66?Pao(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@+W66 T&  <T!@+W66 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@ 66 T&  <T!@ 66L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll{M**0@)(-66 T&  <T!@)(-66( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlldows0**@776 T&  <T!@776X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0@CP76 T&  <T!@CP76-0(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlll 000**@+276 T&  <T!@+276-0X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllvit**@&C86 T&  <T!@&C86-0X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@j7C86 T&  <T!@j7C86-0(p @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll@0**@u86 T&  <T!@u86-0  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@de86 T&  <T!@de86-0(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllJ@0**@T96 T&  <T!@T96-0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**@Ga96 T&  <T!@Ga96-0 l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ݧ96 T&  <T!@ݧ96-0(P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dllvit0**@$:6 T&  <T!@$:6-0P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@6 T&  <T!@6>68 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@>6 T&  <T!@>6(p @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll\@0**@ >6 T&  <T!@ >6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**@>6 T&  <T!@>6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@-L>?6 T&  <T!@-L>?6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@צ×?6 T&  <T!@צ×?6X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@/?6 T&  <T!@/?6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@;fL@6 T&  <T!@;fL@6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@z@6 T&  <T!@z@6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@F@6 T&  <T!@F@6h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@VA6 T&  <T!@VA6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlle@0**@gA6 T&  <T!@gA6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**@3FA6 T&  <T!@3FA64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@0 B6 T&  <T!@0 B6(h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@5>dB6 T&  <T!@5>dB6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@!!?B6 T&  <T!@!!?B6((@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@TC6 T&  <T!@TC6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@=nC6 T&  <T!@=nC6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@6C6 T&  <T!@6C6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@z!D6 T&  <T!@z!D6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dlln@0**@sD6 T&  <T!@sD6 $ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**@LD6 T&  <T!@LD6 L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@QD6 T&  <T!@QD6(X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@nR.E6 T&  <T!@nR.E6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@FE6 T&  <T!@FE6(8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll2\w0**@wE6 T&  <T!@wE6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\tsgwmi.dll\s T&  <T  <Tonal 000nal ElfChnk@X@@X@Iq9=/N WfK ? hMF ߚQ&0**@ :F6 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@ :F6(< @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll**@0ӓF6 T&  <T!@0ӓF6`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@F6 T&  <T!@F6(l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@+tGG6 T&  <T!@+tGG6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@GUG6 T&  <T!@GUG6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@NG6 T&  <T!@NG6(P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@G6 T&  <T!@G6L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll\S**0@@SH6 T&  <T!@@SH6(t @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@&DH6 T&  <T!@&DH6D T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dlloft**0@ӄI6 T&  <T!@ӄI6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@xj`I6 T&  <T!@xj`I6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@xI6 T&  <T!@xI6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@gJ6 T&  <T!@gJ6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@=v%J6 T&  <T!@=v%J6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllows**0@mjJ6 T&  <T!@mjJ6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@i7J6 T&  <T!@i7J6P \ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllows**0@i՛K6 T&  <T!@i՛K6(H @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@/|K6 T&  <T!@/|K6t @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllows**0@ fK6 T&  <T!@ fK6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@?@+L6 T&  <T!@?@+L6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@E}(L6 T&  <T!@E}(L6($@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@aLL6 T&  <T!@aLL6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@L6 T&  <T!@L6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@] 6M6 T&  <T!@] 6M6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@+ޏM6 T&  <T!@+ޏM6 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@eM6 T&  <T!@eM6(P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@xFN6 T&  <T!@xFN60 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@#N6 T&  <T!@#N6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@pN6 T&  <T!@pN6  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@NO6 T&  <T!@NO6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@3O6 T&  <T!@3O6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@˄O6 T&  <T!@˄O6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0 @ 6P6 T&  <T!@ 6P6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60** @!@[P6 T&  <T!@!@[P6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0 @nP6 T&  <T!@nP6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60** @u Q6 T&  <T!@u Q6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0 @BHgQ6 T&  <T!@BHgQ6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@Q6 T&  <T!@Q6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@>ER6 T&  <T!@>ER6($@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@ݪyR6 T&  <T!@ݪyR6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@MXJR6 T&  <T!@MXJR6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0@%ĄR6 T&  <T!@%ĄR6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@X&S6 T&  <T!@X&S6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@}S6 T&  <T!@}S6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@ yS6 T&  <T!@ yS6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0@- 2T6 T&  <T!@- 2T6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@22T6 T&  <T!@22T6D 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0@5T6 T&  <T!@5T6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**@CU6 T&  <T!@CU6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@ҶgQU6 T&  <T!@ҶgQU6th @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllows**0@񲜗U6 T&  <T!@񲜗U6(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@#U6 T&  <T!@#U6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@D*nJV6 T&  <T!@D*nJV6( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**@ V6 T&  <T!@ V6p @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllAct**0@GV6 T&  <T!@GV6(,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60** @^W6 T&  <T!@^W6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0!@W6 T&  <T!@W60(!@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**"@ X6 T&  <T!@ X60 D "@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**#@5gX6 T&  <T!@5gX6 X #@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllows**0$@x(fX6 T&  <T!@x(fX6 ($@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**%@\X6 T&  <T!@\X6 T%@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0&@xY6 T&  <T!@xY6 (4&@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**'@IatY6 T&  <T!@IatY6 < 8 '@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllAct**0(@1Y6 T&  <T!@1Y6 (d(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll60**)@3%Z6 T&  <T!@3%Z6 p )@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll**0*@n{Z6 T&  <T!@n{Z6LE|_5E|_5(@*@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe(%SystemRoot%\system32\tscfgwmi.dll0**+@ζԏZ6 T&  <T!@ζԏZ6PTh+@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exeT%systemroot%\system32\wbem\cimwin32.dll&**,@eɑZ6 T&  <T!@eɑZ6b%POɈ<,T|,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exeT%SystemRoot%\System32\smbwmiv2.dllll**(-@?ґZ6 T&  <T!@?ґZ6b%POɈ<,-@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QEm>B3 ?+Axn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI/[Id .N3 ClientMachine _User 2?ClientProcessId &ߚ} Component & xg Operation (9J ResultCode .hxb PossibleCause N{0BEE0735-052A-4CA3-828D-F1BC6D2C764A}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**.@PՑZ6 T&  <T!@PՑZ6b%POɈ<,.@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN{FB6E24CB-FE5D-4763-9469-1F659B43BA08}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownC**/@PՑZ6 T&  <T!@PՑZ6b%POɈ<, /@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN{5D5C828D-5026-4BFC-BDF1-F969C55FC83B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown **0@PՑZ6 T&  <T!@PՑZ6b%POɈ<,T0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exeT%systemroot%\system32\wbem\wmipcima.dll**1@Z6 T&  <T!@Z6dZ6dZ6L1@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN{1A1268A9-2258-4874-BB23-48E798CF1FA5}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownro**2@7OZ6 T&  <T!@7OZ6dZ6dZ62@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN{D4DD3B07-3EE4-4B7E-A044-486453265175}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownfI**3@Z6 T&  <T!@Z6dZ6dZ6 3@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN{4C18204A-ADF4-434C-8AA9-08DB3FE8E6F6}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**4@WZ6 T&  <T!@WZ6dZ6dZ6 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN{B00309DF-2863-434D-95FF-3F3D17AF3437}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**5@jZ6 T&  <T!@jZ6dZ6dZ6 ( 5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dlla**6@(Z6 T&  <T!@(Z6dZ6dZ6 ( 6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**7@zoZ6 T&  <T!@zoZ6dZ6dZ6T|7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exeT%systemroot%\system32\wbem\cimwin32.dllWin** 8@vZ6 T&  <T!@vZ6dZ6dZ6Tx8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exeT%systemroot%\system32\wbem\ntevt.dllWMI **9@̀Z6 T&  <T!@̀Z6dZ6dZ69@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN({00000000-0000-0000-0000-000000000000}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystemProduct2Unknown.dl**:@Z6 T&  <T!@Z6dZ6dZ6:@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN({8B126493-365A-0000-CE64-128B5A36DB01}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown-W**;@.Z6 T&  <T!@.Z6dZ6dZ6;@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN({8B126493-365A-0000-CA64-128B5A36DB01}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2Unknownr**<@+Z6 T&  <T!@+Z6dZ6dZ6<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational QN({8B126493-365A-0000-F664-128B5A36DB01}FILF-APP-RECNT AUTHORITY\SYSTEM4UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_OperatingSystem2Unknown**=@ Z6 T&  <T!@ Z6dZ6dZ6=@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0>@Hv.[6 T&  <T!@Hv.[6dZ6dZ6T>@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**?@n[6 T&  <T!@n[6dZ6dZ6 ?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@@L:[6 T&  <T!@L:[6 T @@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**A@ b=\6 T&  <T!@ b=\6 Pd A@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**0B@k6 T&  <T!@>k6PT q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**r@Xk6 T&  <T!@Xk6P r@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0s@X[1k6 T&  <T!@X[1k6PTs@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**t@HPl6 T&  <T!@HPl6Pt@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0u@Hl6 T&  <T!@Hl6PT u@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**v@Zm6 T&  <T!@Zm6PP v@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0w@n`m6 T&  <T!@n`m6PTw@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll@0**x@~v1m6 T&  <T!@~v1m6P x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**y@Mm6 T&  <T!@Mm6P< Py@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0z@: n6 T&  <T!@: n6PTz@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**{@]Tkn6 T&  <T!@]Tkn6P {@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0|@~n6 T&  <T!@~n6PT|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**}@o6 T&  <T!@o6P }@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0~@_po6 T&  <T!@_po6PT8~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**@Mo6 T&  <T!@Mo6P| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ݶ"p6 T&  <T!@ݶ"p6PT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll@0**@ߢ_p6 T&  <T!@ߢ_p6P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@p6 T&  <T!@p6Pd @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@pp6 T&  <T!@pp6PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**@E644q6 T&  <T!@E644q6Pp@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@Z+Bq6 T&  <T!@Z+Bq6PTP@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**@ėq6 T&  <T!@ėq60x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@2m;r6 T&  <T!@2m;r60T @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**@K>r6 T&  <T!@K>r608 d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@mr6 T&  <T!@mr60T|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll@0**@ Ms6 T&  <T!@ Ms60 \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@}<[s6 T&  <T!@}<[s60 0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@:|s6 T&  <T!@:|s60T$ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**@ >t6 T&  <T!@ >t6PD @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@?St6 T&  <T!@?St6PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**@vt6 T&  <T!@vt6PD@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@;8u6 T&  <T!@;8u6PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**@ cu6 T&  <T!@ cu6PP@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@,u6 T&  <T!@,u6PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll#@0**@3v6 T&  <T!@3v6P p@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**@ X-v6 T&  <T!@ X-v6P|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@vlv6 T&  <T!@vlv6PT( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**@uv6 T&  <T!@uv6P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@bw6 T&  <T!@bw6PT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllAct0**@=0{w6 T&  <T!@=0{w6P`d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@}pw6 T&  <T!@}pw6PT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll0**@Ӥ1x6 T&  <T!@Ӥ1x6| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@&Nx6 T&  <T!@&Nx6T| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll**0**@x6 T&  <T!@x6 \ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**@;x6 T&  <T!@;x6 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlln/2**0@7y6 T&  <T!@7y6T @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dllide0**@yy6 T&  <T!@yy6D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0@Jy6 T&  <T!@Jy60T @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll!0**@VeIz6 T&  <T!@VeIz60 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll: M**0@ z6 T&  <T!@ z60T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exeT%SystemRoot%\system32\tscfgwmi.dll%\sy0**@`z6 T&  <T!@`z60 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll}F@=4de@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**f@4 T&  <T!@4D 4f@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**g@pY4 T&  <T!@pY4tPg@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**h@94 T&  <T!@94P, (h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0i@䚬4 T&  <T!@䚬4Pdi@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**j@qzN 4 T&  <T!@qzN 4Pp j@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll**0k@UN4 T&  <T!@UN4Pk@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**l@>Y4 T&  <T!@>Y4PXl@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**m@Q{04 T&  <T!@Q{04Pm@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0n@~y4 T&  <T!@~y4P` n@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**o@$D4 T&  <T!@$D4P0 o@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**p@m4 T&  <T!@m4P p@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWi**q@F4 T&  <T!@F4P 4q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0r@K(4 T&  <T!@K(4P r@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**s@+V%4 T&  <T!@+V%4Ps@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0t@"n4 T&  <T!@"n40t t@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**u@u4 T&  <T!@u40 u@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**v@V"4 T&  <T!@V"40D|v@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll****0w@.4 T&  <T!@.40\w@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**x@4 T&  <T!@40 dx@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**y@#x4 T&  <T!@#x40d y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**0z@˰4 T&  <T!@˰4Ppz@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**{@N̰4 T&  <T!@N̰4P {@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**|@ v<4 T&  <T!@ v<4PHh|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll**0}@~4 T&  <T!@~4P4}@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**~@ 4 T&  <T!@ 4Pd ~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**@/?a4 T&  <T!@/?a4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@@F14 T&  <T!@@F14P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@bD4 T&  <T!@bD4P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@Q4 T&  <T!@Q4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@4 T&  <T!@4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@04 T&  <T!@04P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@yV4 T&  <T!@yV4P\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0@XՖ4 T&  <T!@XՖ4P0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@i4 T&  <T!@i4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@H4 T&  <T!@H4PPD@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**0@_I4 T&  <T!@_I4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@`K4 T&  <T!@`K4P ( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@~˴4 T&  <T!@~˴40 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@Ʌ4 T&  <T!@Ʌ4 Pt@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@gy4 T&  <T!@gy4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@_m4 T&  <T!@_m4 Px @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll T&  <T@~U4 P` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnk@@@@}]31='FWf{K ? `MF ׹I&0**@~U4 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@~U4 P` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll\t**0@tv4 T&  <T!@tv4 Pt@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@4!4 T&  <T!@4!4 P H @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@fCb4 T&  <T!@fCb4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@c4 T&  <T!@c4 P 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@OsҶ4 T&  <T!@OsҶ4 P0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@@4 T&  <T!@@4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@fQh#4 T&  <T!@fQh#4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@:4 T&  <T!@:4 PX @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**0@"٩Ƿ4 T&  <T!@"٩Ƿ4 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@fͷ4 T&  <T!@fͷ4 PP@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@`H4 T&  <T!@`H4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@qz4 T&  <T!@qz4 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@v4 T&  <T!@v4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@4 T&  <T!@4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@=,4 T&  <T!@=,4P 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@p-4 T&  <T!@p-4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@붹4 T&  <T!@붹4P| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@4 T&  <T!@4PT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@4 T&  <T!@4PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**@wR4 T&  <T!@wR4P| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@v4 T&  <T!@v4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@얺4 T&  <T!@얺4P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@<94 T&  <T!@<94PX 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll**0@E4 T&  <T!@E4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@bF4 T&  <T!@bF4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@y4 T&  <T!@y4P< @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**0@4 T&  <T!@4P@ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@}4 T&  <T!@}4PD@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@Đj4 T&  <T!@Đj4PH@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@H4 T&  <T!@H4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@$4 T&  <T!@$4P| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll**@4 T&  <T!@4PX@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@+!\4 T&  <T!@+!\4P@ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@>m^4 T&  <T!@>m^4Ph@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@'zϽ4 T&  <T!@'zϽ4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@Ib 4 T&  <T!@Ib 4P( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@"4 T&  <T!@"4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@s4 T&  <T!@s4PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**0@cľ4 T&  <T!@cľ4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@s9ž4 T&  <T!@s9ž4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@8kS84 T&  <T!@8kS84PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll **0@G8kx4 T&  <T!@G8kx4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@t{4 T&  <T!@t{4P$@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@4 T&  <T!@4P(d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**0@u)4 T&  <T!@u)4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@04 T&  <T!@04P, @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**@t 4 T&  <T!@t 4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@UA54 T&  <T!@UA54PX@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@4 T&  <T!@4P4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**@2aP4 T&  <T!@2aP4PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll!**0@-4 T&  <T!@-4x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@1;G4 T&  <T!@1;G4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@4 T&  <T!@4(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**0@1A4 T&  <T!@1A4d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@_I4 T&  <T!@_I4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@=4 T&  <T!@=4\ x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll**0@E4 T&  <T!@E4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@4 T&  <T!@4d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**@u4 T&  <T!@u4X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll**@ư4 T&  <T!@ư4 < @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@v4 T&  <T!@v40@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@N4 T&  <T!@N4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIns**@WrZ4 T&  <T!@WrZ48 D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@[4 T&  <T!@[4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@]4 T&  <T!@]4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@s 4 T&  <T!@s 40@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@n&]4 T&  <T!@n&]4 t @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@ձ4 T&  <T!@ձ4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@N;T4 T&  <T!@N;T4d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@HL4 T&  <T!@HL4L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll**@+4 T&  <T!@+4<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll**@;p4 T&  <T!@;p4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@,lr4 T&  <T!@,lr44@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@4 T&  <T!@48 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWi**0@ԛ&4 T&  <T!@ԛ&4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll40**@-&4 T&  <T!@-&4` T@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**@XS4 T&  <T!@XS4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@?4 T&  <T!@?4,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@wF4 T&  <T!@wF4d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@SM;4 T&  <T!@SM;4P 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe %systemroot%\system32\wbem\cimwin32.dll/Op**@=4 T&  <T!@=4t(b ]H P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe %systemroot%\system32\wbem\wmipcima.dllit**@ľ>4 T&  <T!@ľ>4t(b ]H P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe %SystemRoot%\System32\smbwmiv2.dllicro**(@>4 T&  <T!@>4t(b ]H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IEm>B3 ?+Apn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI'[Id .F3 ClientMachine {_User 2?ClientProcessId &׹} Component &pg Operation (1J ResultCode .`xb PossibleCause N{68FD1C6F-911F-4DFA-B9DE-BBE2FF8A55F4}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**@7*>4 T&  <T!@7*>4 64L64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN{8DD0F33B-1B23-41F7-935C-90CEF119EB10}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown-W**@/K>4 T&  <T!@/K>4 64L64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN{A08DE218-133E-47BB-B272-2B5C556BB02C}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowner**@jEN>4 T&  <T!@jEN>4 64L64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN{C0A17A91-0871-43A7-9BEF-70EBEE365469}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**@ŧP>4 T&  <T!@ŧP>4 64L64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN{6DE483BE-9C2F-4F32-A9EE-E50A65181664}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownM**@ŧP>4 T&  <T!@ŧP>4 64L64\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN{87C9321D-2967-44D4-A786-2F70CCFB8969}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownWi**@1Z>4 T&  <T!@1Z>4 64L64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN{451A5D10-4DAD-44DE-ACC0-819DF70792BA}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown<**@zAG4 T&  <T!@zAG4 64L64L h @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exeL C:\Windows\System32\wbem\WmiPerfClass.dll**@G4 T&  <T!@G4 64L64L X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll**@CW4 T&  <T!@CW4 64L64 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@W2`4 T&  <T!@W2`4 64L64 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe %systemroot%\system32\wbem\cimwin32.dll** @h~9`4 T&  <T!@h~9`4 64L64 @@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe %systemroot%\system32\wbem\ntevt.dll **@"4 T&  <T!@"4 64L64@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN({00000000-0000-0000-0000-000000000000}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystemProduct2Unknownoft**@=e4 T&  <T!@=e4 6464 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN({36E6D70B-34C8-0000-90D7-E636C834DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2UnknownSy**@G轄4 T&  <T!@G轄4 6464 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN({36E6D70B-34C8-0000-90D7-E636C834DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown**@J4 T&  <T!@J4 64K64 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational IN({36E6D70B-34C8-0000-4BD7-E636C834DB01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem2Unknown00**0@ϋ4 T&  <T!@ϋ4 64K64 ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllFWi0**@@4 T&  <T!@@4 64K64(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**@_4 T&  <T!@_4 64K64 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**@eZ94 T&  <T!@eZ94 64K64\d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllvit**0@y>4 T&  <T!@y>4 64K64 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlll 000**@mޫ4 T&  <T!@mޫ4   @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0@.)/4 T&  <T!@.)/4  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlll 000**@\4 T&  <T!@\4 x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**@UX`4 T&  <T!@UX`4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**0@F$4 T&  <T!@F$4  <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllB0**@}D4 T&  <T!@}D4 ( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllrat**@E4 T&  <T!@E4 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**0@XW4 T&  <T!@XW4  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllerat0nal 000 T&  <Tdows\System32\wbem\WmiPerfInst.dll <TvitOperational 000Operational ElfChnk@s@@s@xi3=n WfK ? MF &0**@W|Z4 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@W|Z4 ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll\t**@I4 T&  <T!@I4  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@4 T&  <T!@4 l @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@q} 4 T&  <T!@q} 4  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**@v4 T&  <T!@v4 P H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@ͧ4 T&  <T!@ͧ4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@޽4 T&  <T!@޽4 Px< @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@74 T&  <T!@74 Pt (@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@3;o4 T&  <T!@3;o4 PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@?jo4 T&  <T!@?jo4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0** @\O4 T&  <T!@\O4 P@ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0 @ y,4 T&  <T!@ y,4 P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0** @r!/4 T&  <T!@r!/4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts** @}[4 T&  <T!@}[4 PH @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllmiP** @m%4 T&  <T!@m%4 Pp @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@ 4 T&  <T!@ 4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\ts0**@B4 T&  <T!@B4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@G4 T&  <T!@G4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@=mؖ4 T&  <T!@=mؖ4 P|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@<$4 T&  <T!@<$4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@<{:4 T&  <T!@<{:4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0**@Hd=4 T&  <T!@Hd=4 Px @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@dէ4 T&  <T!@dէ4 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@T4 T&  <T!@T4 P t @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@Xog4 T&  <T!@Xog4 P|@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@WQY4 T&  <T!@WQY4 P0 ( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@Sқ4 T&  <T!@Sқ4 PHT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@%4 T&  <T!@%4 P t @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**@m4 T&  <T!@m4 P , @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@CS4 T&  <T!@CS4 P 0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@T4 T&  <T!@T4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@4 T&  <T!@4 Pl@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@+4 T&  <T!@+4 P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0** @!t4 T&  <T!@!t4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**!@o2{q4 T&  <T!@o2{q4 P4!@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0"@4 T&  <T!@4 P  "@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**#@Q4 T&  <T!@Q4 P #@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**$@$4 T&  <T!@$4 P$@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0%@}Obk4 T&  <T!@}Obk4 P |%@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**&@s4 T&  <T!@s4 P&@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**'@DJ4 T&  <T!@DJ4GP 8'@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0(@4 T&  <T!@4GP x (@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**)@4 T&  <T!@4GP<p)@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll\ts***@'4 T&  <T!@'4GP *@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0+@34 T&  <T!@34GP  +@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**,@r4 T&  <T!@r4GP ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**-@m=4 T&  <T!@m=4GP -@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**.@ 4 T&  <T!@ 4GPD.@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0/@쾆4 T&  <T!@쾆4GP  /@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**0@t4 T&  <T!@t4GP<0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllmiP**01@364 T&  <T!@364GP 1@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll!0**2@ (74 T&  <T!@ (74GP 2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**3@G]4 T&  <T!@G]4GP 3@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**04@~4 T&  <T!@~4GP 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**5@0.4 T&  <T!@0.4GP l 5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**6@zU4 T&  <T!@zU4GP 86@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**7@$4 T&  <T!@$4GPT7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllmiP**08@ y4 T&  <T!@ y4GP 8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**9@_34 T&  <T!@_34P9@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0:@alO4 T&  <T!@alO4P d :@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**;@l`4 T&  <T!@l`4P ,;@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**<@o4 T&  <T!@o4P<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0=@4 T&  <T!@4P  =@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllIns0**>@r4 T&  <T!@r4Px>@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**?@߄n4 T&  <T!@߄n4P 0 ?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@@^>4 T&  <T!@^>4P 0@@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**A@ø4 T&  <T!@ø4PA@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**B@kM 4 T&  <T!@kM 4P B@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**C@fm4 T&  <T!@fm4P C@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0D@7}kp4 T&  <T!@7}kp4P < D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**E@ƥ*4 T&  <T!@ƥ*4Px@ E@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0F@a4 T&  <T!@a4P  F@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**G@&4 T&  <T!@&4P0G@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll\ts**H@*4 T&  <T!@*4PH@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0I@US/4 T&  <T!@US/4P  I@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWi0**J@<4 T&  <T!@<4P J@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**K@ o:4 T&  <T!@ o:4 K@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0L@4 T&  <T!@4   L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**M@=4 T&  <T!@=4   M@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**N@;4 T&  <T!@;4  hN@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0O@w<34 T&  <T!@w<34   O@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll**0**P@%UE4 T&  <T!@%UE4  p P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**Q@H4 T&  <T!@H4 Q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0R@Ku4 T&  <T!@Ku4  R@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllId0**S@(4 T&  <T!@(4  S@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllbe**T@$GQ4 T&  <T!@$GQ4  DT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**U@d4 T&  <T!@d4  U@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**0V@HB4 T&  <T!@HB4  8V@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllhare0**W@)14 T&  <T!@)14   W@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllEE3**0X@1PK4 T&  <T!@1PK4  8X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllicro0**Y@y R4 T&  <T!@y R4 L Y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**Z@Z#4 T&  <T!@Z#4  Z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllod **0[@t4 T&  <T!@t4  [@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll{4510**\@W4 T&  <T!@W4 8\@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**]@mk4 T&  <T!@mk4PHh ]@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll**0^@4 T&  <T!@4P x^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMI-A0**_@^ 4 T&  <T!@^ 4P _@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**`@54 T&  <T!@54P`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0a@]c4 T&  <T!@]c4P < a@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll#F0**b@yc4 T&  <T!@yc4Pb@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll=e**c@)4 T&  <T!@)4Pc@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllnow**0d@N4 T&  <T!@N4P < d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllN0**e@fKt,4 T&  <T!@fKt,4PDe@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll4K**f@E4 T&  <T!@E4Pf@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll Wi**0g@\d4 T&  <T!@\d4P 8g@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**h@O4 T&  <T!@O4P0 h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**i@?4 T&  <T!@?4Pi@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0j@|4 T&  <T!@|4P  j@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**k@>>}4 T&  <T!@>>}4P8k@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**l@F4 T&  <T!@F4P 0l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0m@ .4 T&  <T!@ .4P m@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**n@,224 T&  <T!@,224P \n@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**o@4 T&  <T!@4 Po@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0p@,4 T&  <T!@,4 P  p@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0**q@my4 T&  <T!@my4 P q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**r@tM4 T&  <T!@tM4 P ,r@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0s@Ѐ4 T&  <T!@Ѐ4 P Xs@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlltemR0t%\system32\ T&  <T@S4 P\t@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkt@@t@@(XQ`x<%=n WfK ? MF &0**t@S4 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@S4 P\t@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**u@O4 T&  <T!@O4 P(u@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0v@?EG4 T&  <T!@?EG4 P Xv@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll40**w@8GN4 T&  <T!@8GN4 P0w@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**x@4 T&  <T!@4 P( x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0y@kS4 T&  <T!@kS4 P y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**z@P4 T&  <T!@P4 P(z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**{@bj4 T&  <T!@bj4 P {@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0|@}¬4 T&  <T!@}¬4 P  |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll40**}@4 T&  <T!@4 P}@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**~@UA4 T&  <T!@UA4 P ~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@Ľ_4 T&  <T!@Ľ_4 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@9a4 T&  <T!@9a4 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@2.4 T&  <T!@2.4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@U4 T&  <T!@U4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll40**@XR4 T&  <T!@XR4P0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@d4 T&  <T!@d4P p @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@+V4 T&  <T!@+V4P ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@N$4 T&  <T!@N$4P\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@L@44 T&  <T!@L@44P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@ww4 T&  <T!@ww4P 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllmiP0**@4 T&  <T!@4P<h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@M4 T&  <T!@M4P\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@{}'4 T&  <T!@{}'4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@*4 T&  <T!@*4P X @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\ts0**@I'4 T&  <T!@I'4Ppl @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@h4 T&  <T!@h4P D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll40**@4 T&  <T!@4P h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@p{I4 T&  <T!@p{I4PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@Ԙ4 T&  <T!@Ԙ4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@!4 T&  <T!@!4P0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@74 T&  <T!@74P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@5C4 T&  <T!@5C4P d @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@K4 T&  <T!@K4P0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@,-4 T&  <T!@,-4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ 14 T&  <T!@ 14P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@a4 T&  <T!@a4P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@q4 T&  <T!@q4P( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@m4 T&  <T!@m4P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@Aʳ4 T&  <T!@Aʳ4P \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@X4 T&  <T!@X4PD@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllmiP**@颌Y4 T&  <T!@颌Y4P| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@ei\4 T&  <T!@ei\4P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\ts0**@A1C4 T&  <T!@A1C4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@4 T&  <T!@4P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@\^4 T&  <T!@\^4P X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@|Oz4 T&  <T!@|Oz4PL@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@b?n4 T&  <T!@b?n4P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll40**@4 T&  <T!@4P\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@.4 T&  <T!@.4PL @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@'!)t4 T&  <T!@'!)t4ܶ  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll!0**@jק}4 T&  <T!@jק}4ܶ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**@(4 T&  <T!@(4ܶ <h @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllmiP**@n&4 T&  <T!@n&4ܶ H @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0@39'4 T&  <T!@39'4ܶ  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\ts0**@L4 T&  <T!@L4ܶ l @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@б4 T&  <T!@б4ܶ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll40**@]4 T&  <T!@]4ܶ |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll\ts**@a/4 T&  <T!@a/4ܶ L l @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll.**@Ѩu4 T&  <T!@Ѩu4ܶ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0@*4 T&  <T!@*4ܶ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllnst.0**@X5 T&  <T!@>X5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll32\w0**@J5 T&  <T!@J54\@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll **@i[F5 T&  <T!@i[F54@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0@J5 T&  <T!@J5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll32\w0** @"5 T&  <T!@"5|D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll ** @_ 5 T&  <T!@_ 5| @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0 @&@ 5 T&  <T!@&@ 5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll32\w0** @xu 5 T&  <T!@xu 5 D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll ** @0 5 T&  <T!@0 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0@ 5 T&  <T!@ 5 ( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll32\w0**@ƾ7 5 T&  <T!@ƾ7 5L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dlls**@TE 5 T&  <T!@TE 5l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllexe**@唼^ 5 T&  <T!@唼^ 5l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllexe**0@ 5 T&  <T!@ 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlls\Sy0**@& 5 T&  <T!@& 5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**@ 5 T&  <T!@ 5x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllexe**0@iX 5 T&  <T!@iX 5 l @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllprvs0**@*` 5 T&  <T!@*` 5p @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllexe**0@[E 5 T&  <T!@[E 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlls\Sy0**@>@ 5 T&  <T!@>@ 5, 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllrvs**@^0w 5 T&  <T!@^0w 5X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllexe**0@ 5 T&  <T!@ 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlls\Sy0**@ 5 T&  <T!@ 5L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll**@B6 5 T&  <T!@B6 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmip**0@p 5 T&  <T!@p 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**@ 5 T&  <T!@ 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**@ 5 T&  <T!@ 5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllv**0 @M0#5 T&  <T!@M0#5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**!@UOj5 T&  <T!@UOj5!@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllv**"@/35 T&  <T!@/358"@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**0#@5 T&  <T!@5 #@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllemro0**$@95 T&  <T!@95 $@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**%@iB5 T&  <T!@iB5 %@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0&@A5 T&  <T!@A5 &@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlls\Sy0**'@Lhp5 T&  <T!@Lhp5L '@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dlli**(@*5 T&  <T!@*5ܶ  (@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllv**)@H&5 T&  <T!@H&5ܶ  )@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmip**0*@pP<5 T&  <T!@pP<5ܶ *@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**+@X=o5 T&  <T!@X=o5ܶ  +@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllv**,@ w5 T&  <T!@ w5ܶ p ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**0-@5 T&  <T!@5ܶ h -@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**.@75 T&  <T!@75ܶ <.@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllv**/@r)Z5 T&  <T!@r)Z5ܶ </@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllmip**00@9¡5 T&  <T!@9¡5ܶ h 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**1@ 5 T&  <T!@ 5ܶ |41@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllv**2@ 5 T&  <T!@ 5)0 2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**03@hrT5 T&  <T!@hrT5)0  3@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll:\Wi0**4@6f5 T&  <T!@6f5)0L 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dllC**5@C5 T&  <T!@C5)0( , 5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllIns**06@M5 T&  <T!@M5)0  6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**7@ސd95 T&  <T!@ސd95)0d7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVIC**8@&|5 T&  <T!@&|5)0D 8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**09@p5 T&  <T!@p5)0 d 9@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**:@Ea5 T&  <T!@Ea5)0 H :@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0;@Hl5 T&  <T!@Hl5 P ;@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**<@5 T&  <T!@5 P0 4 <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllexe**=@5 T&  <T!@5 P =@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVIC**0>@o5 T&  <T!@o5 P , >@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**?@\*g5 T&  <T!@\*g5 P\?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllexe**@@5 T&  <T!@5 P\T@@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0A@w5 T&  <T!@w5 P 4A@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**B@QJ5 T&  <T!@QJ5 P@B@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**C@:ol>5 T&  <T!@:ol>5 P`C@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVIC**0D@\M5 T&  <T!@\M5 P D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllL %0**E@9y5 T&  <T!@9y5 P E@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**F@!+5 T&  <T!@!+5 P F@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0G@!85 T&  <T!@!85 P G@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**H@4k5 T&  <T!@4k5 P H@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**I@4[5 T&  <T!@4[5 PL ( I@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dlle**J@5 T&  <T!@5 P8 (J@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0K@uq5 T&  <T!@uq5 P d K@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**L@:/5 T&  <T!@:/5 P8 HL@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllexe**M@xʚV5 T&  <T!@xʚV5P8 0M@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0N@X͝5 T&  <T!@X͝5P  N@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**O@5 T&  <T!@5P`O@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**P@ 5 T&  <T!@ 5P0dP@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0Q@[+P5 T&  <T!@[+P5P Q@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllL %0**R@L5 T&  <T!@L5P, TR@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**S@}w5 T&  <T!@}w5P, S@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0T@X5 T&  <T!@X5P lT@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlle 0**U@U65 T&  <T!@U65PL l U@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dlle**V@>D5 T&  <T!@>D5P 0V@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**W@U-o5 T&  <T!@U-o5P W@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0X@?5 T&  <T!@?5P X@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**Y@B3E5 T&  <T!@B3E5P Y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**Z@* "5 T&  <T!@* "5P Z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0[@h5 T&  <T!@h5P 8 [@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll.exe0**\@;֛5 T&  <T!@;֛5P\@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**]@I5 T&  <T!@I5P ]@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVICProvwmipr T&  <T!@k5P  ^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dlll ElfChnk^@@^@@Q JD=` If= ? MF &"**^@k5 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tu!@k5  ^@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"00\M!kb]˒AI)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName = sCode *` HostProcess   , v# ProviderPath @DWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllw**_@3`5 T&  <T!@3`5Pd _@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllD**`@Q5 T&  <T!@Q5\dT`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dlll**0a@kL5 T&  <T!@kL5\ < a@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllׯ0**b@9 5 T&  <T!@9 5\ b@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlld**c@ {:5 T&  <T!@ {:5\ c@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**0d@[5 T&  <T!@[5\  d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllb0**e@H5 T&  <T!@H5\ |e@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll+3**f@]>H5 T&  <T!@]>H5\ f@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**g@P5 T&  <T!@P5\ g@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"PCIMWin32awmiprvse.exe %systemroot%\system32\wbem\wmipcima.dllt.**h@5 T&  <T!@5\ h@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BSppProviderwmiprvse.exe %SystemRoot%\System32\sppwmi.dllmiP**0i@&5 T&  <T!@&5\ < i@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**0j@545 T&  <T!@545\ dj@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll@0**k@nh5 T&  <T!@nh5\0 k@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll@**l@B5 T&  <T!@B5\ hl@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0m@~5 T&  <T!@~5\ m@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll@0**n@N 5 T&  <T!@N 5\L n@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dllP**o@i.5 T&  <T!@i.5\ o@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**0p@?Ι5 T&  <T!@?Ι5\ Xp@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**q@5 T&  <T!@5\dXq@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllmiP**r@ϡ 5 T&  <T!@ϡ 5\ r@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**0s@~KL 5 T&  <T!@~KL 5\  s@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllWmiP0**t@\-/ 5 T&  <T!@\-/ 5\ lt@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**u@7b 5 T&  <T!@7b 5P0hu@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0v@L\ 5 T&  <T!@L\ 5P hv@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**w@22!5 T&  <T!@22!5P, w@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll@**x@%y!5 T&  <T!@%y!5Px,x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll@**0y@J!5 T&  <T!@J!5P  y@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**z@U!5 T&  <T!@U!5P z@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**{@8$"5 T&  <T!@8$"5Px8{@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll@**0|@%e"5 T&  <T!@%e"5P |@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**}@z"5 T&  <T!@z"5PL }@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll @**~@"5 T&  <T!@"5P~@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll @**0@qy#5 T&  <T!@qy#5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@WJQ#5 T&  <T!@WJQ#5P0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll @**@@䮃#5 T&  <T!@@䮃#5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll @**0@e#5 T&  <T!@e#5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@* $5 T&  <T!@* $5P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**@E6$5 T&  <T!@E6$5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@e}$5 T&  <T!@e}$5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@e_$5 T&  <T!@e_$5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@$5 T&  <T!@$5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@ ,9%5 T&  <T!@ ,9%5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@Cc%5 T&  <T!@Cc%5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@_%5 T&  <T!@_%5PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**0@ %5 T&  <T!@ %5P l@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@fMn&5 T&  <T!@fMn&5P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@V\&5 T&  <T!@V\&5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@q&5 T&  <T!@q&5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@#=&5 T&  <T!@#=&5P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@Q'5 T&  <T!@Q'5Pl , @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll**0@H'5 T&  <T!@H'5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@Ձ'5 T&  <T!@Ձ'5P@ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@ '5 T&  <T!@ '5Pp@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@;1'5 T&  <T!@;1'5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@ ].(5 T&  <T!@ ].(5P(@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**@aMg(5 T&  <T!@aMg(5P <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@6>(5 T&  <T!@6>(5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@G~(5 T&  <T!@G~(5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@qWa)5 T&  <T!@qWa)5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@X)5 T&  <T!@X)5 Px @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**@)5 T&  <T!@)5 P8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@*5 T&  <T!@*5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@yJ*5 T&  <T!@yJ*5 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **@_*5 T&  <T!@_*5 PL @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll **0@9*5 T&  <T!@9*5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@]*5 T&  <T!@]*5 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **@W@+5 T&  <T!@W@+5 P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0@py+5 T&  <T!@py+5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@5x+5 T&  <T!@5x+5 P`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **@ +5 T&  <T!@ +5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0@>,,5 T&  <T!@>,,5 P 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@} _,5 T&  <T!@} _,5 P ,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **@z-,5 T&  <T!@z-,5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0@ ,5 T&  <T!@ ,5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@-5 T&  <T!@-5 P0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllT**(@&-5 T&  <T!@&-5 P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00",TServerFeatureProviderwmiprvse.exe %windir%\system32\wbem\servercompprov.dll@(**H@Z -5 T&  <T!@Z -5 P\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"&deploymentproviderwmiprvse.exe%systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**@HJ-5 T&  <T!@HJ-5\CIEFlW0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0@-5 T&  <T!@-5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMic0**@ -5 T&  <T!@ -5 D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **@-5 T&  <T!@-5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0@9lD.5 T&  <T!@9lD.5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0 0**@ZG.5 T&  <T!@ZG.5 x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@3.5 T&  <T!@3.5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0@.5 T&  <T!@.5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\0**@z+/5 T&  <T!@z+/50 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll\**@Rgc/5 T&  <T!@Rgc/5 <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0@UG/5 T&  <T!@UG/5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@a/5 T&  <T!@a/5 L@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@$05 T&  <T!@$05 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0@]05 T&  <T!@]05 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@Z05 T&  <T!@Z05 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **@aE05 T&  <T!@aE050, @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll **0@T15 T&  <T!@T15 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll 0**@K15 T&  <T!@K15 @@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllL **@A{15 T&  <T!@A{15  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@"15 T&  <T!@"15P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllft-W0**@o15 T&  <T!@o15P\d@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**@.25 T&  <T!@.25P0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0@K`~25 T&  <T!@K`~25P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllft-W0**@25 T&  <T!@25PL @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dll**@F)n25 T&  <T!@F)n25P` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll0**0@o^(35 T&  <T!@o^(35P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMic0**@L[35 T&  <T!@L[35P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll, **@2435 T&  <T!@2435P `@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll, **0@~35 T&  <T!@~35P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllMic0**@45 T&  <T!@45P, @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllL **@.J G45 T&  <T!@.J G45P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0@$45 T&  <T!@$45P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllft-W0**@F45 T&  <T!@F45P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**@55 T&  <T!@55P@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@+@55 T&  <T!@+@55P \@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllft-W0**@=x{55 T&  <T!@=x{55P 8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt-W**@055 T&  <T!@055P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0@Ὂ55 T&  <T!@Ὂ55   @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dllft-W0**@#&65 T&  <T!@#&65 <@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00"RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllt-Wdows-WMI-Act T&  <T/O@_65 ,\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnk@G@@G@xLdQ+x!=n WfK ? MF &0**@_65 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@_65 ,\ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll.d**0@5 T&  <T!@>5ܶ x@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@F"3U>5 T&  <T!@F"3U>5ܶ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@_>5 T&  <T!@_>5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@>5 T&  <T!@>5`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@?5 T&  <T!@?5 (@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@(h@?5 T&  <T!@(h@?5x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@rt?5 T&  <T!@rt?54 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll@**0@P?5 T&  <T!@P?5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@{q?5 T&  <T!@{q?5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@:BA'@5 T&  <T!@:BA'@5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@m@5 T&  <T!@m@5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@!@5 T&  <T!@!@5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**@ϒ@5 T&  <T!@ϒ@5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@mj A5 T&  <T!@mj A5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@4bA5 T&  <T!@4bA5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@~A5 T&  <T!@~A5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll@**0@'A5 T&  <T!@'A5  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@jJB5 T&  <T!@jJB5 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@&|?B5 T&  <T!@&|?B5D @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@IB5 T&  <T!@IB5 L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@ zB5 T&  <T!@ zB5Pt@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** @K B5 T&  <T!@K B5P@ @ @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll@**0 @KRg9C5 T&  <T!@KRg9C5P L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0** @tC5 T&  <T!@tC5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** @i+C5 T&  <T!@i+C5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0 @i$C5 T&  <T!@i$C5P L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@fmr&D5 T&  <T!@fmr&D5PT @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll@**@cWD5 T&  <T!@cWD5P x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@ D5 T&  <T!@ D5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@PD5 T&  <T!@PD5P` @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll@**@zN E5 T&  <T!@zN E5P`@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll@**0@_7QE5 T&  <T!@_7QE5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@vQσE5 T&  <T!@vQσE5P x @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**@SE5 T&  <T!@SE5P<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll@**0@G F5 T&  <T!@G F5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@MLJF5 T&  <T!@MLJF5P  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**@u=qF5 T&  <T!@u=qF5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0@ٶF5 T&  <T!@ٶF5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@8F5 T&  <T!@8F5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**@]yV)G5 T&  <T!@]yV)G5P( @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll@**0@lG5 T&  <T!@lG5P @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@g&G5 T&  <T!@g&G5#0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0@ h{H5 T&  <T!@ h{H5#0  @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll0**@MOH5 T&  <T!@MOH5#0 @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllZ ** @zH5 T&  <T!@zH5#0L @Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exeL %systemroot%\system32\wbem\wmiprov.dllD**!@[:H5 T&  <T!@[:H5#0!@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0"@mAH5 T&  <T!@mAH5#0 "@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**#@I5 T&  <T!@I5#0 #@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**$@;I5 T&  <T!@;I5#0 $@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0%@I5 T&  <T!@I5#0 %@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**&@ tI5 T&  <T!@ tI5#00 @&@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'@-I5 T&  <T!@-I5#0  '@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(@4J5 T&  <T!@4J5#0 x (@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**)@TnJ5 T&  <T!@TnJ5#0( )@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w***@fοJ5 T&  <T!@fοJ5#0*@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0+@)J5 T&  <T!@)J5#0 (+@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**,@܆'K5 T&  <T!@܆'K5D,@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**-@jљSK5 T&  <T!@jљSK5,-@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0.@{K5 T&  <T!@{K5  .@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**/@9KK5 T&  <T!@9KK5|/@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0@ L5 T&  <T!@ L5 0@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**01@jJML5 T&  <T!@jJML5 1@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**2@8dL5 T&  <T!@8dL5 2@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**3@L5 T&  <T!@L50 3@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**04@ M5 T&  <T!@ M5 4@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**5@:1v9M5 T&  <T!@:1v9M5 <5@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**6@:{M5 T&  <T!@:{M5\ 6@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**07@_M5 T&  <T!@_M5 7@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll\sys0**8@tFM5 T&  <T!@tFM5 8@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllwbe**9@WN5 T&  <T!@WN5l $9@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0:@3fN5 T&  <T!@3fN5 :@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**;@N5 T&  <T!@N5< ;@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllmiP**<@\N5 T&  <T!@\N5<@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0=@QO5 T&  <T!@QO5 ,=@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**>@OO5 T&  <T!@OO5P<X >@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllmiP**?@ ꀅO5 T&  <T!@ ꀅO5P@ ?@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0@@=3iO5 T&  <T!@=3iO5P P @@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**A@JP5 T&  <T!@JP5P A@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**B@?R8P5 T&  <T!@?R8P5P( B@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0C@-9P5 T&  <T!@-9P5P C@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**D@t2ֵP5 T&  <T!@t2ֵP5P 8D@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**E@P5 T&  <T!@P5P <E@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0F@j2Q5 T&  <T!@j2Q5P F@Microsoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe %SystemRoot%\system32\tscfgwmi.dll2\ts0**G@H