ElfFileb(FJEbElfChnk,%F%F,%F%F|vN T&  <T!@>|vNX | /%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllI$F**0%FN T&  <T!@Nh 00%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllJ$F**01%F5 O T&  <T!@5 Od 1%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**2%Ft+O T&  <T!@t+O 2%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllL$F**3%FO T&  <T!@O$ 3%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll$F**04%F0O T&  <T!@0O 4%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**5%FO T&  <T!@O`  5%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll$F**6%FF_P T&  <T!@F_PT6%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll$F**07%FE#7pP T&  <T!@E#7pP7%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**8%F0P T&  <T!@0P 0 p8%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**9%F Q T&  <T!@ Q 0Dx9%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll$F**0:%F#Q T&  <T!@#Q 0$ :%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**;%FrAQ T&  <T!@rAQ 0DX ;%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll$F**<%Fr}Q T&  <T!@r}Q 0  <%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**0=%F|xQ T&  <T!@|xQ 0$ =%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**>%F2Q T&  <T!@2Q  `>%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**?%F]`xR T&  <T!@]`xR p?%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**0@%F³R T&  <T!@³R  @%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**A%F}R T&  <T!@}R |d A%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll$F**B%F,S T&  <T!@,S \PB%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll$F**0C%Fy;S T&  <T!@y;S  C%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**D%FT[S T&  <T!@T[S  D%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**E%F:S T&  <T!@:S  E%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**0F%FacS T&  <T!@acS  F%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G%F֝ T T&  <T!@֝ T L `G%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll$F**H%F T T&  <T!@ T   H%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**0I%FT T&  <T!@T t I%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**J%FyFT T&  <T!@yFT J%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**K%F+DU T&  <T!@+DU  K%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**0L%F|SU T&  <T!@|SU $L%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**M%F#tU T&  <T!@#tU M%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**N%F0eV T&  <T!@0eV pN%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll$F**0O%FEV T&  <T!@EV 8O%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**P%FG'V T&  <T!@G'VpP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll$F**Q%FV T&  <T!@Vp Q%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll$F**0R%FV T&  <T!@V R%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**S%FV T&  <T!@Vp S%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll$F**T%FadW T&  <T!@adW< T%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll$F**0U%F`lW T&  <T!@`lWU%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**V%FRڌW T&  <T!@RڌW V%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**W%FH!X T&  <T!@H!X\( W%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll$F**0X%FHX T&  <T!@HXD X%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Y%F\ T&  <T!@>\ Phm%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0n%F 'P\ T&  <T!@ 'P\ Pn%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**o%Ftm\ T&  <T!@tm\ Pho%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**p%F G\ T&  <T!@ G\ P H p%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0q%F] T&  <T!@] Pq%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**r%Fz#] T&  <T!@z#] Pt `r%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll**s%F1] T&  <T!@1] PhL s%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll**0t%Fí] T&  <T!@í] Pt%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**u%F$] T&  <T!@$] Phu%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllMic**v%F5Y^ T&  <T!@5Y^ Pt\ v%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dll**w%FGPh^ T&  <T!@GPh^ P H w%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllg**0x%Fh^ T&  <T!@h^ Plx%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**y%F^ T&  <T!@^ H y%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMic**z%Fgg _ T&  <T!@gg _dz%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0{%F-Q_ T&  <T!@-Q_ {%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**|%F9O8_ T&  <T!@9O8_l|%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMic**}%F)½_ T&  <T!@)½_}%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll4**0~%F0_ T&  <T!@0_~%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**%F+_ T&  <T!@+_ P%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMic**%Fp,p` T&  <T!@p,p` %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%F` T&  <T!@`0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**%Fj` T&  <T!@j`0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%F"3a T&  <T!@"3a0h%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**%F3a T&  <T!@3a0P %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllMic**%F^Va T&  <T!@^Va0P%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllMic**%Fsa T&  <T!@sa0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0%F9a T&  <T!@9a0`%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**%F'b T&  <T!@'b0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMic**%Fb T&  <T!@b0P %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dlld **0%F>(tb T&  <T!@>(tb00%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**%F4b T&  <T!@4bP$ |%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllMic**%Fm%=c T&  <T!@m%=cP4 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll`**0%FRLc T&  <T!@RLcPh%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**%Filc T&  <T!@ilcP t%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT **%FZ&c T&  <T!@Z&cPt%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dll**%Fh}c T&  <T!@h}cP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%FL?Zc T&  <T!@L?ZcPP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%Fp $d T&  <T!@p $dP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%Ffd T&  <T!@fdP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%F)ͱd T&  <T!@)ͱdP@%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%Frd T&  <T!@rdP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**%FTe T&  <T!@TePD 8%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0%Fde T&  <T!@deP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%F`8e T&  <T!@`8eP4 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%Fk¨f T&  <T!@k¨fP0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll**0%Fyf T&  <T!@yfP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%F5f T&  <T!@5fP0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll**%FȖf T&  <T!@ȖfPt\%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dll**%FI'f T&  <T!@I'fP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%F`PFf T&  <T!@`PFfP@%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%F, f T&  <T!@, fP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%F[gmg T&  <T!@[gmgP 4 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@ æM T&  <Tty@}gPl %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFystem32\tscfgwmi.dlldows0MI-Activity/Operational Em>B3 ?ivOpn g<nal ElfChnk%F&F%F&FXZf=e&eeWf[eK ? @fMF e~e)d&0**%F}g T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@}gPl %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**%FNg T&  <T!@NgP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%FzR_h T&  <T!@zR_hP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%F/h T&  <T!@/hP4 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%FoyjPh T&  <T!@oyjPhP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%F6*h T&  <T!@6*hPX %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%Fh T&  <T!@hP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%FM2i T&  <T!@M2iP\ %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%Fi T&  <T!@i0p%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%FHi T&  <T!@Hi0@ %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%FLii T&  <T!@Lii0p%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%Fԥ7j T&  <T!@ԥ7j0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%FSHj T&  <T!@SHj0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%F>?Lfj T&  <T!@>?Lfj0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%FȪj T&  <T!@Ȫj0 L%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%FX&j T&  <T!@X&j0@%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%F*k T&  <T!@*k%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%FÜk T&  <T!@Ük %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%F{k T&  <T!@{k%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%Fk T&  <T!@kP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**%Fk T&  <T!@kt%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dlld**%F=OPl T&  <T!@=OPl %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0%FB`l T&  <T!@B`lp %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC%F0**%Fl!l T&  <T!@l!ll %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**%F_̑m T&  <T!@_̑mh%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0%FY;m T&  <T!@Y;m` %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF%F0**%F@Km T&  <T!@@Km`%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**%F;n T&  <T!@;nt%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dllP**%Fy3jJn T&  <T!@y3jJn$ %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0%FRLn T&  <T!@RLn%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**%FOn T&  <T!@Onp(%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllmiP**%FSn T&  <T!@Sn%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0%Fn T&  <T!@n %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**%FAkKo T&  <T!@AkKo x %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**%Fcq$o T&  <T!@cq$ol %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0%F wo T&  <T!@ wo%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**%FTo T&  <T!@Top %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllmiP**%F MSp T&  <T!@ MSpD %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0%F̾Bep T&  <T!@̾Bep8%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**%FX&p T&  <T!@X&p=0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**%FPq T&  <T!@Pq=0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0%Fiq T&  <T!@iq=0D%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**%FԬ`q T&  <T!@Ԭ`q=0(` %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllmiP**P%Fŏq T&  <T!@ŏqgAA%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )dEm>B3 ?+APdn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMIe[Id .&e3 ClientMachine [e_User 2~e?ClientProcessId &e} Component &ePdg Operation (fJ ResultCode .@fxb PossibleCause N({0EA3B767-B441-0001-1DD6-A30E41B4DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '412'2UnknowntivP**%FTq T&  <T!@TqgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**0%Fq T&  <T!@qgAA%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**%Fr T&  <T!@rgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**%Fclr T&  <T!@clrgAAh%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll#F**0%FB}r T&  <T!@B}rgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**%FAr T&  <T!@ArgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**%F#.s T&  <T!@#.sgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0%F:0s T&  <T!@:0sgAA4%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**%F5{s T&  <T!@5{sgAAX %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllWin**%Fs T&  <T!@sP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0%F&Ws T&  <T!@&WsP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**%F{o+t T&  <T!@{o+tP\h %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllAct**%F4܄t T&  <T!@4܄tP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0%Fe't T&  <T!@e'tP( %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**%Ft T&  <T!@tP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**%Fw7u T&  <T!@w7uP t%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0%F*sHu T&  <T!@*sHuP$%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%F.Ƞu T&  <T!@.ȠuP p%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**%F,ou T&  <T!@,ouPx %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%Fu T&  <T!@uP$%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%FGv T&  <T!@GvP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**%F{v T&  <T!@{vgAߣA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dllt**%F?Fv T&  <T!@?FvgAA%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**0%FQv T&  <T!@QvgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**%F6 v T&  <T!@6 vgAAx %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAct**%FсPw T&  <T!@сPwgAAL %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllAct**0%F|gaw T&  <T!@|gawgAAl %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**%FQw T&  <T!@QwgAAl @ %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllAct**%Fx T&  <T!@xP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAct**0%Fד5x T&  <T!@ד5xP\%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%F\x T&  <T!@\xPd %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%F寮x T&  <T!@寮xPh%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%Fox T&  <T!@oxP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%F\y T&  <T!@\yP$%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%FŲhy T&  <T!@Ųhy:0\%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%Fyy T&  <T!@yy:0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%Fy T&  <T!@y:0 h%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**%FVz T&  <T!@Vz:0D %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%F:,z T&  <T!@:,z:0`%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%Ftz T&  <T!@tz:0D %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%FX5z T&  <T!@X5z:0x %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%Fywz T&  <T!@ywz:0L %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%FQ'{ T&  <T!@Q'{:0T %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**%F{ T&  <T!@{:0 t%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%FG{ T&  <T!@G{:0L %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%F{ T&  <T!@{:0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**%Fnq3| T&  <T!@nq3|P %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%F.lE| T&  <T!@.lE|PD %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**%Fon| T&  <T!@on|Pl %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**%F}| T&  <T!@}|P@ %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0%F| T&  <T!@|P %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**&FbC} T&  <T!@bC}P p&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&Fvf} T&  <T!@vf}P\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0&Fq} T&  <T!@q}P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll00**&F:{} T&  <T!@:{}P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&F4L~ T&  <T!@4L~P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&Fi؉]~ T&  <T!@i؉]~P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FLB~ T&  <T!@LB~P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&FP T&  <T!@PPd&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**0&FQZ T&  <T!@QZP0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** &F+Zg T&  <T!@+Zg0, &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll** &F2ر T&  <T!@2ر0|  &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll**0 &F>* T&  <T!@>*0T &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** &F|p T&  <T!@|p0< &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll** &FId T&  <T!@IdP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&FYu T&  <T!@YuP0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fx׽ T&  <T!@x׽P@L&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**&F`t T&  <T!@`tPd H &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllPer**0&F[( T&  <T!@[(Px&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllALSE0**&F u T&  <T!@ uPD&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllPer**&F?<ف T&  <T!@?<فP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllPer**0&F*ՙہ T&  <T!@*ՙہP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0ws0MI-Activity/Operational Em>B3 ?ivOpn g<nal ElfChnk&F&F&F&Fx%*b=n WfK ? MF &0**&F>]$ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@>]$Pl &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll\t**&F} T&  <T!@}P\ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&FNj T&  <T!@NjP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F ݂ T&  <T!@ ݂Pl ,&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll\ts**&F͑/ T&  <T!@͑/P|&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F:A T&  <T!@:AP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F N T&  <T!@ NP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**&F ⃴ T&  <T!@ ⃴P8 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F  T&  <T!@ Pp&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F'O T&  <T!@'OP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**&Fٿ T&  <T!@ٿ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0 &Fĺۦ T&  <T!@ĺۦp &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**!&F3 T&  <T!@3 !&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**"&F$LjH T&  <T!@$LjH "&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0#&F&4Y T&  <T!@&4Yl#&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$&F^t T&  <T!@^tx $&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll\ts**%&F. T&  <T!@. D%&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&&F|  T&  <T!@| &&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'&FxT T&  <T!@xTl'&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**(&F~ܼ T&  <T!@~ܼT (&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0)&FJ T&  <T!@J)&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%F0***&F  T&  <T!@ p *&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll%F**+&F,` T&  <T!@,`<+&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0,&Fir T&  <T!@ir< ,&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%F0**-&FRÇ T&  <T!@RÇ 0t-&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll%F**.&F? T&  <T!@? 0.&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0/&F$ T&  <T!@$ 0`/&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%F0**0&F3p T&  <T!@3p 0 0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**1&F5gƈ T&  <T!@5gƈPT 1&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**02&F0׈ T&  <T!@0׈Ph 2&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**3&F-. T&  <T!@-.PH 3&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**4&F2y T&  <T!@2yP\ 4&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**05&F  T&  <T!@ P 5&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**6&FM։ T&  <T!@M։PD6&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**7&Ff, T&  <T!@f,P7&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**08&F#]= T&  <T!@#]=Ph8&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**9&F; T&  <T!@;P 9&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**:&F!f T&  <T!@!fP`:&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**0;&FU- T&  <T!@U-P ;&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**<&Ff; T&  <T!@f;P<&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**=&F| T&  <T!@|P =&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0>&F T&  <T!@P >&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**?&FG싴 T&  <T!@G싴P?&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**@&F&M T&  <T!@&MP @&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllws/**0A&F*U T&  <T!@*UPA&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B&FEᝡ T&  <T!@EᝡPHp B&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllWin**C&F5Q T&  <T!@5QPDC&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllWin**0D&FU  T&  <T!@U P D&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**E&F7uQ T&  <T!@7uQPpE&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**F&F( T&  <T!@(P F&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0G&Fo T&  <T!@oP G&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**H&FK T&  <T!@KP LH&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**I&Fn\ T&  <T!@n\P I&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0J&Fe?n T&  <T!@e?nPJ&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**K&F4, T&  <T!@4,P K&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**L&FC T&  <T!@CP L&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0M&F=! T&  <T!@=!PM&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**N&Fl T&  <T!@lPxN&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllWin**O&F T&  <T!@P hO&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0P&Fӏ T&  <T!@ӏPP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**Q&F# T&  <T!@#P Q&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**R&Fh"C T&  <T!@h"CPR&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0S&F" T&  <T!@"PS&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**T&F=Ґ T&  <T!@=ҐP \T&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**U&F4( T&  <T!@4(Pl4 U&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllWin**0V&F9 T&  <T!@9P4 V&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**W&Ft! T&  <T!@t!P ( W&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**X&F$ۑ T&  <T!@$ۑP  X&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0Y&FU[R쑴 T&  <T!@U[R쑴PY&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**Z&F6G8 T&  <T!@6G8P Z&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**[&F͍ T&  <T!@͍P<|[&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0\&F2r  T&  <T!@2r P \&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**]&F yk T&  <T!@ ykP ]&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**^&F@ T&  <T!@@P, @^&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0_&FQ T&  <T!@QPD_&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**`&Fܞ T&  <T!@ܞPh `&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllWMI**a&Fn T&  <T!@nP Ta&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0b&Fe T&  <T!@ePDb&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**c&FgN T&  <T!@gNP c&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**d&F< T&  <T!@<PH d&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0e&Fޑ T&  <T!@ޑPe&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**f&F T&  <T!@Ppf&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**g&Fg T&  <T!@gP@g&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0h&F|_j T&  <T!@|_jPh&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**i&Fn˲ T&  <T!@n˲P`hi&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllWMI**j&F  T&  <T!@ Ph j&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0k&Fx2 T&  <T!@x2Pk&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**l&Fh T&  <T!@hP  l&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**m&FS T&  <T!@SP@ |m&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0n&FJЖ T&  <T!@JЖPn&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**o&Fy T&  <T!@yPx o&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**p&Fq T&  <T!@qP` p&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0q&Fӂ T&  <T!@ӂPD q&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**r&F0ޗ T&  <T!@0ޗPr&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**s&F jV$ T&  <T!@ jV$P s&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0t&F=5 T&  <T!@=5Plt&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**u&FS~ T&  <T!@S~0L |u&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllWMI**v&FkE)ט T&  <T!@kE)ט0 v&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0w&FTr蘴 T&  <T!@Tr蘴0\w&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**x&F)4 T&  <T!@)40 x&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**y&F;􉙴 T&  <T!@;􉙴0` y&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0z&Fa0E T&  <T!@a0EPd z&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**{&Fcm㙴 T&  <T!@cm㙴PH {&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllWMI**|&F|K T&  <T!@|KP |&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0}&FGN T&  <T!@GNP| }&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**~&F  T&  <T!@ P@~&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllWMI**&FCO T&  <T!@COP\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0&F T&  <T!@P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**&FVuJI T&  <T!@VuJIP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**&Fff T&  <T!@ffPl @ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0&F: T&  <T!@:P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**&FO T&  <T!@OP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**&F2U T&  <T!@2UP` p &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0&Ff T&  <T!@fP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**&F,# T&  <T!@,#P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**&Fvm T&  <T!@vmP, `&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0&F-U T&  <T!@-UPD &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0nal 000B T&  <Twm@dPp &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnk&F&F&F&FΩ {=n WfK ? MF &0**&Fd T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@dPp &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll\t**&F\~Ý T&  <T!@\~Ý &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F|%̝ T&  <T!@|%̝&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F C T&  <T!@ C&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**&Fm T&  <T!@mT&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F~ T&  <T!@~4&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F'̞ T&  <T!@'̞ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**&FIz_/ T&  <T!@Iz_/&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F61 T&  <T!@61D &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F&&z T&  <T!@&&z &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**&FzDӟ T&  <T!@zDӟ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F䟴 T&  <T!@䟴|&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F=_0 T&  <T!@=_0 l&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**&Ff T&  <T!@f 0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F)e T&  <T!@)e@ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fp߬ߠ T&  <T!@p߬ߠ.0p|&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll\ts**&FS8 T&  <T!@S8.0t\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&FM5J T&  <T!@M5J.0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FHp T&  <T!@Hp.0@ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**&F롴 T&  <T!@롴.0xD&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0&F T&  <T!@P8 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%F0**&FeE T&  <T!@eEP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll%F**&F$鏞 T&  <T!@$鏞P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0&F֯ T&  <T!@֯P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%F0**&Fȇe T&  <T!@ȇeP( &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll%F**&F[Q T&  <T!@[QP\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0&Fib T&  <T!@ibP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%F0**&FW T&  <T!@WP\ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**&F. T&  <T!@.P` 4&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**0&F&u T&  <T!@&uP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F*oc T&  <T!@*ocP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&F3𶤴 T&  <T!@3𶤴PdH &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**0&FdJȤ T&  <T!@dJȤPD&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F1 T&  <T!@1Pt &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&FVi T&  <T!@ViPT &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&F{{ T&  <T!@{{P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F拉ȥ T&  <T!@拉ȥPH &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**(&F@ T&  <T!@@P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000,TServerFeatureProviderwmiprvse.exe%windir%\system32\wbem\servercompprov.dllU-(**H&F;G T&  <T!@;GP( &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exe(%systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**&FV5 T&  <T!@V5 [ELՋh;$&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**0&F˒- T&  <T!@˒-P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FAY T&  <T!@AYP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&F~sdϦ T&  <T!@~sdϦPL 4&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**0&Fln঴ T&  <T!@ln঴P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fzf- T&  <T!@zf-PD &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**&FGO7 T&  <T!@GO7P 8 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&F T&  <T!@P( &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fgܧ T&  <T!@gܧP\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&F5 T&  <T!@5P\ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0&F9aZF T&  <T!@9aZFP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F6vM T&  <T!@6vM0$ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll**&FMY T&  <T!@MY0X@ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**0&Ftx( T&  <T!@tx(0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FRA T&  <T!@RA0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&F+Y T&  <T!@+Y0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&F T&  <T!@0h&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F. T&  <T!@.0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&FK{M T&  <T!@K{M08\ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**0&Fk^ T&  <T!@k^ h&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fzͧ T&  <T!@zͧ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&FPZ3  T&  <T!@PZ3  \H &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0&F T&  <T!@ x&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fkm T&  <T!@km < &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**&F T&  <T!@ T &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**0&F1^jī T&  <T!@1^jī `&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fr`  T&  <T!@r`  D` &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**&F[e T&  <T!@[e  &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&F|:w T&  <T!@|:w  &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FoMĬ T&  <T!@oMĬ 8&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&FU T&  <T!@U < &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&FP * T&  <T!@P *  &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FQr T&  <T!@Qr &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&FHrڭ T&  <T!@Hrڭ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&Fgܭ T&  <T!@gܭ h&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F!>, T&  <T!@!>, &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&FZ \~ T&  <T!@Z \~ P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&Fj T&  <T!@jP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fx⮴ T&  <T!@x⮴P$&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**&FЗ1 T&  <T!@З1Pp&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&F |B T&  <T!@ |BPH&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F=^ T&  <T!@=^0hP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll**&F䯴 T&  <T!@䯴0, (&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**0&F!J T&  <T!@!J0@&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FJq.M T&  <T!@Jq.M0`&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**&Fϖ T&  <T!@ϖ0 <&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&FlM T&  <T!@lM0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Flf T&  <T!@lf0 @ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&FI T&  <T!@I0( &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll**0&FZ T&  <T!@Z0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FC  T&  <T!@C 0` &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**&FFd T&  <T!@Fd0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&Fh@  T&  <T!@h@ 0@&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FWqY T&  <T!@WqY0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&F% T&  <T!@%0\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&F۹ T&  <T!@۹0@ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FC  T&  <T!@C  P` &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**&F b T&  <T!@ b P x&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&F|_s T&  <T!@|_s P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F  T&  <T!@  P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**&F T&  <T!@ P D &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&F|-& T&  <T!@|-& P&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FPo T&  <T!@Po P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&F+Ǵ T&  <T!@+Ǵ P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&F &ش T&  <T!@ &ش P`&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F89C4 T&  <T!@89C4 P  &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&FSz T&  <T!@Sz PT d&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**0&F|΋ T&  <T!@|΋ P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FN:Ե T&  <T!@N:Ե P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&FG- T&  <T!@G- P` X &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**0&F> T&  <T!@> P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&FA| T&  <T!@A| P$0&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**&Fප T&  <T!@ප P &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0&F/m T&  <T!@/m PP &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&F0: T&  <T!@0:PX0 &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**&Fcϡ T&  <T!@cϡP&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&F%= T&  <T!@%=P\&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Fﷴ T&  <T!@ﷴP$ &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll T&  <T&FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnk&Fs'F&Fs'F4=n WfK ? MF &0**&FE T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@EPh &FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**0'F"W T&  <T!@"WP` 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Ftv T&  <T!@tv;0x'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'F* T&  <T!@*;0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'F-  T&  <T!@- ;0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F'[V T&  <T!@'[V;0( 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**'F{! T&  <T!@{!;0Lp 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'FϞ T&  <T!@Ϟ;0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F} T&  <T!@};0X 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'FX/^ T&  <T!@X/^;04 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0 'Fo T&  <T!@o;0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** 'F5i T&  <T!@5i;0< ` 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll** 'FV  T&  <T!@V ;0  'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0 'F-P" T&  <T!@-P";0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** 'F= m T&  <T!@= m PxH 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**'F$û T&  <T!@$û P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'F5 ջ T&  <T!@5 ջ P\ 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Fi! T&  <T!@i! Pt'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0'F T&  <T!@ P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F܇s T&  <T!@܇s PX 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'FӜм T&  <T!@Ӝм P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll%F**'Ff>q) T&  <T!@f>q) PDx 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll%F**0'Ft: T&  <T!@t: P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F N T&  <T!@ N P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll%F**'F<ܽ T&  <T!@<ܽ P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll%F**0'F T&  <T!@ P\'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F 6 T&  <T!@ 6 P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll%F**'Fr T&  <T!@r P @'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0'Fgb T&  <T!@gb P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F4o T&  <T!@4o P|'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'FR A T&  <T!@R A Pd 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0'F2S T&  <T!@2S P` 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F^t T&  <T!@^tP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll** 'F T&  <T!@PL H 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**0!'F T&  <T!@P|!'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**"'F5S T&  <T!@5S0 "'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**#'F T&  <T!@0@#'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0$'Fڸ T&  <T!@ڸ0 $'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**%'F[ T&  <T!@[0%'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllr.D**&'Fri T&  <T!@ri00&'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0''Fk T&  <T!@k0 ''FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**('F.`Ǽ T&  <T!@.`Ǽ0 ('FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**)'F`C ´ T&  <T!@`C ´0d)'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0*'FՊ ´ T&  <T!@Պ ´0 *'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**+'FBg´ T&  <T!@Bg´0 +'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**,'Fk´ T&  <T!@k´0` ,'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0-'F?E´ T&  <T!@?E´0 -'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**.'F!ô T&  <T!@!ô0 0 .'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**/'Ftô T&  <T!@tô0 /'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**00'FVô T&  <T!@Vô0$0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**1'FS7ô T&  <T!@S7ôPL 1'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll2\w**2'F^%Ĵ T&  <T!@^%ĴP2'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**03'F26Ĵ T&  <T!@26ĴP`3'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**4'FւĴ T&  <T!@ւĴP ` 4'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**5'Fz:kĴ T&  <T!@z:kĴPh 5'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll2\w**06'FIĴ T&  <T!@IĴP6'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**7'F +n=Ŵ T&  <T!@ +n=ŴPH h 7'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll2\w**8'F/6Ŵ T&  <T!@/6ŴP , 8'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**09'FˮŴ T&  <T!@ˮŴP9'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**:'FSŴ T&  <T!@SŴP0 :'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**;'FXLƴ T&  <T!@XLƴP|t ;'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0<'F9ROƴ T&  <T!@9ROƴP <'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**='F ƴ T&  <T!@ ƴP ='FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**>'FbDƴ T&  <T!@bDƴPT >'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0?'FS#Ǵ T&  <T!@S#ǴPP?'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**@'FF3PǴ T&  <T!@F3PǴP @'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**A'F Ǵ T&  <T!@ ǴP A'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0B'FǴ T&  <T!@ǴPX B'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**C'F@Ǵ T&  <T!@@Ǵ P@h C'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll2\w**D'FJlVȴ T&  <T!@JlVȴ>0$hD'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0E'Fgȴ T&  <T!@gȴ>0l E'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**F'F#Wȴ T&  <T!@#Wȴ>0| F'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll2\w**G'F& ɴ T&  <T!@& ɴ>0  G'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0H'F˿ɴ T&  <T!@˿ɴ>0H'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**I'F[wcdɴ T&  <T!@[wcdɴ>0 I'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**J'Fsɴ T&  <T!@sɴ>0 J'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0K'F)`lɴ T&  <T!@)`lɴ>0K'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**L'Fr ʴ T&  <T!@r ʴ>0 L'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**M'Fnʴ T&  <T!@nʴ>0  M'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0N'F5ʴ T&  <T!@5ʴ>0pN'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**O'Fʴ T&  <T!@ʴ>0X O'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**P'FA0˴ T&  <T!@A0˴>0P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0Q'F+3˴ T&  <T!@+3˴>0DQ'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**R'F6˴ T&  <T!@6˴>0  R'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**S'F}˴ T&  <T!@}˴>08 S'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0T'F˴ T&  <T!@˴>0 T'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**U'F.̴ T&  <T!@.̴PU'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**V'F#R̴ T&  <T!@#R̴Pp4V'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0W'F̴ T&  <T!@̴PW'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**X'F̴ T&  <T!@̴P X'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**Y'Fn0:ʹ T&  <T!@n0:ʹP Y'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0Z'FxwKʹ T&  <T!@xwKʹPZ'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**['F kʹ T&  <T!@ kʹP ['FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**\'F'yʹ T&  <T!@'yʹP\ \'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0]'FlEʹ T&  <T!@lEʹP]'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**^'F'Jδ T&  <T!@'JδP 8^'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**_'F#ßδ T&  <T!@#ßδP8_'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0`'F(δ T&  <T!@(δPH`'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**a'F1δ T&  <T!@1δP8 a'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**b'FkRϴ T&  <T!@kRϴ0 b'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0c'Fcϴ T&  <T!@cϴ0D c'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**d'F͌ϴ T&  <T!@͌ϴ0 x d'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**e'F\Hд T&  <T!@\Hд0P @e'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0f'F\д T&  <T!@\д0 f'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**g'F¥T_д T&  <T!@¥T_дP x g'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**h'F22д T&  <T!@22дPh'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0i'Fд T&  <T!@дP,i'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**j'FnѴ T&  <T!@nѴPH ` j'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll2\w**k'F&kѴ T&  <T!@&kѴP k'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0l'FTX|Ѵ T&  <T!@TX|ѴP l'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**m'FYWѴ T&  <T!@YWѴP m'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**n'FxҴ T&  <T!@xҴP\Tn'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0o'F(/Ҵ T&  <T!@(/ҴPo'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**p'FJҴ T&  <T!@JҴP tp'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**q'F}AҴ T&  <T!@}AҴPx q'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0r'F!Ҵ T&  <T!@!ҴPr'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**s'FU-Ӵ T&  <T!@U-ӴPs'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\wm\WmiPerfIns T&  <T@{ӴP@ t'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkt'F'Ft'F'FWLo=n WfK ? MF &0**t'F{Ӵ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@{ӴP@ t'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll\t**0u'F˔Ӵ T&  <T!@˔ӴP( u'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**v'F_Ӵ T&  <T!@_ӴPl` v'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**w'F L6Դ T&  <T!@ L6ԴP8 w'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0x'FGԴ T&  <T!@GԴPdx'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**y'FNओԴ T&  <T!@NओԴPD y'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**z'FpNԴ T&  <T!@pNԴPD z'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0{'F hԴ T&  <T!@ hԴPD{'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**|'FcBGմ T&  <T!@cBGմP |'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**}'Fմ T&  <T!@մP P }'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0~'F:մ T&  <T!@:մP~'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F^kմ T&  <T!@^kմP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'FieNִ T&  <T!@ieNִPD'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'Fh` `ִ T&  <T!@h` `ִP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F=6ִ T&  <T!@=6ִPDl 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**'Fz״ T&  <T!@z״P@ P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'F=w״ T&  <T!@=w״Ph 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F'pj״ T&  <T!@'pj״0l 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll**'F\״ T&  <T!@\״0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'FS״ T&  <T!@S״0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F$ش T&  <T!@$شUPt 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll%F**'F'8gش T&  <T!@'8gشUP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll%F**0'Fx|xش T&  <T!@x|xشUP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Fش T&  <T!@شUP@ ('FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll%F**'F>ٴ T&  <T!@>ٴPl 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll%F**0'FEM+ٴ T&  <T!@EM+ٴP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Fkrwٴ T&  <T!@krwٴP d'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll%F**'F eٴ T&  <T!@ eٴP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0'Fٴ T&  <T!@ٴP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'FI&ڴ T&  <T!@I&ڴPX 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**'Fyڴ T&  <T!@yڴPDp'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**0'F8ڴ T&  <T!@8ڴP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Fڴ T&  <T!@ڴP d 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**'F{U;۴ T&  <T!@{U;۴PD 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**0'FOC۴ T&  <T!@OC۴P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Fm۴ T&  <T!@m۴Pt 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll**'FV7۴ T&  <T!@V7۴P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0'F-Ɍ۴ T&  <T!@-Ɍ۴P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**'FiRܴ T&  <T!@iRܴP0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllr.D**'Fۂܴ T&  <T!@ۂܴP d'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'FB]ܴ T&  <T!@B]ܴP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'Fܴ T&  <T!@ܴP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F#Jݴ T&  <T!@#JݴPp 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'FY+\ݴ T&  <T!@Y+\ݴP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'Fg'ݴ T&  <T!@g'ݴPH 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F}aݴ T&  <T!@}aݴP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F ޴ T&  <T!@ ޴P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F W޴ T&  <T!@ W޴P$'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'Fg^޴ T&  <T!@g^޴P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F\L޴ T&  <T!@\L޴P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FCߴ T&  <T!@CߴPT T'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FLcߴ T&  <T!@LcߴPl  'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F9(tߴ T&  <T!@9(tߴP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'Fzߴ T&  <T!@zߴ 0( `'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F T&  <T!@ 0PX 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F?m' T&  <T!@?m' 0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'Fڭt T&  <T!@ڭt 0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FN[ T&  <T!@N[ 08'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F@ T&  <T!@@ 0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F`3 T&  <T!@`3 0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FԶ{ T&  <T!@Զ{P4 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F2 T&  <T!@2P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FY% T&  <T!@Y%P\ x 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F. T&  <T!@.PP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'Ft? T&  <T!@t?P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F:ʼn T&  <T!@:ʼnPp 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FL T&  <T!@LPd'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F$ T&  <T!@$PT 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FGn@ T&  <T!@Gn@Pt 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F T&  <T!@P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F;} T&  <T!@;}P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F? T&  <T!@?P@ 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FG T&  <T!@GP  'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'FzRX T&  <T!@zRXP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FQ T&  <T!@QP<'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F2 T&  <T!@2Pl 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F.  T&  <T!@. P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FU T&  <T!@UP4 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FqԠ T&  <T!@qԠ PH@'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F T&  <T!@ Pt 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FAPV T&  <T!@APV P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FMq_ T&  <T!@Mq_ PP 0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'Fp T&  <T!@p P,'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FVҺ T&  <T!@VҺ P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'Fd? T&  <T!@d?0 @ 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F# T&  <T!@#0,'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'FNs T&  <T!@Ns0l 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F@ T&  <T!@@0l'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'FP` T&  <T!@P`0x'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'Fk  T&  <T!@k 0D 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F0 T&  <T!@00'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F T&  <T!@0 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**'F$3 T&  <T!@$30 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FѰ* T&  <T!@Ѱ*0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'Fl< T&  <T!@l<0t 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F  T&  <T!@ 0t 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FB#z T&  <T!@B#zPD 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F T&  <T!@P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F = T&  <T!@ =P8 p'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F#&T T&  <T!@#&TP@'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F T&  <T!@PD 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F T&  <T!@P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F*="C T&  <T!@*="CP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'FpsrT T&  <T!@psrTPd 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F٦ T&  <T!@٦P0 p'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'FR{ T&  <T!@R{P4 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'FB T&  <T!@BP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F8R T&  <T!@8RP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'F T&  <T!@P 0'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F@f T&  <T!@@fP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F T&  <T!@P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**'Fwj T&  <T!@wjPl  'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'Fs}l T&  <T!@s}lP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'F8S T&  <T!@8SP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**'Fh T&  <T!@hP 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0'F4 T&  <T!@4PD 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'Fr T&  <T!@rP'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\wm\WmiPerfIns T&  <T@6P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnk'F](F'F](F`p!r_=n WfK ? MF &0**'F6 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@6P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0'F҄ T&  <T!@҄P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F T&  <T!@P T 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**'FYs T&  <T!@YsP@'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'FKU T&  <T!@KUPT 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F[ T&  <T!@[0h 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'Fi& T&  <T!@i& PD 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'Fc#8 T&  <T!@c#8 P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'FS+ T&  <T!@S+ P 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**'F" T&  <T!@" PH 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'F\ T&  <T!@\ P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'FEr> T&  <T!@Er> P4 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll**'Ful T&  <T!@ul P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'FUĝ T&  <T!@Uĝ P'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'FU T&  <T!@U P` 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**'F&$N T&  <T!@&$N ('FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'FlP T&  <T!@lP  'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'Fbՠ T&  <T!@bՠ @ @'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll**'FM T&  <T!@M 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0'FHe T&  <T!@He 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**'F΃M T&  <T!@΃M  'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll%F**'Fdޤ T&  <T!@dޤ X 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll%F**0'F5 T&  <T!@5 'FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F0 T&  <T!@0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll%F**(FɺW T&  <T!@ɺW <t (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll%F**0(Fs;i T&  <T!@s;i (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(FM T&  <T!@M  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll%F**(F  T&  <T!@   8 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(FqKo T&  <T!@qKo , (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F`h T&  <T!@`h H (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**(F]3R T&  <T!@]3R 8 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**0(F0. T&  <T!@0. @ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** (F T&  <T!@  p (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll** (Fp T&  <T!@p  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0 (FEu T&  <T!@Eu\ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** (FC T&  <T!@Ct  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll** (F1 T&  <T!@1 0`  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**0(FE4 T&  <T!@E4 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**(FHN T&  <T!@HN 0 p (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllr.D**(Fھ T&  <T!@ھ 0Ld(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(F8 T&  <T!@8 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**(F@$6 T&  <T!@@$6 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**(F{ T&  <T!@{ 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(F T&  <T!@ 0H(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**(Fف T&  <T!@ف 0x(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**(Ff; T&  <T!@f; 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(F*L T&  <T!@*L 0H(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**(F1 T&  <T!@1 0X(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**(F@( T&  <T!@@( 0( (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(F$B T&  <T!@$B 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**(FQ/J T&  <T!@Q/J 0$X(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll2\w**(Fu T&  <T!@u 0D (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(F8Z T&  <T!@8Z(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**(F4v T&  <T!@4v\(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll2\w**(FLS T&  <T!@LS (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0 (Fs(e T&  <T!@s(e (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**!(F\K T&  <T!@\K !(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**"(Fh T&  <T!@h( "(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0#(F$ T&  <T!@$@#(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**$(FP\Dd T&  <T!@P\Ddt p $(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll2\w**%(F,r T&  <T!@,r4%(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0&(F T&  <T!@@&(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**'(Fx T&  <T!@x '(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**((FqEl T&  <T!@qEl ((FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0)(F\} T&  <T!@\}L )(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0***(F  T&  <T!@ x*(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**+(FB T&  <T!@B +(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0,(Fh0 T&  <T!@h0L ,(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**-(F T&  <T!@D -(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll2\w**.(F" T&  <T!@"0X .(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0/(FƓ8 T&  <T!@Ɠ8 d /(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**0(FY0 T&  <T!@Y0 p l 0(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll2\w**1(Ft T&  <T!@t 4X 1(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll2\w**02(F\  T&  <T!@\  < 2(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**3(F8 T&  <T!@8  3(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**4(F)7 T&  <T!@)7 4(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**05(F҆H T&  <T!@҆H  5(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**6(F{G T&  <T!@{G  6(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**7(F; T&  <T!@; 0 l 7(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**08(Fᝧ T&  <T!@ᝧ H 8(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**9(F;D T&  <T!@;D \9(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll2\w**:(F' T&  <T!@' p:(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0;(F x T&  <T!@ x ;(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**<(F T&  <T!@  <(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**=(FO T&  <T!@O l (=(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0>(FHa T&  <T!@Ha $ >(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**?(Fs= T&  <T!@s= H  ?(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@(F6 T&  <T!@6  @(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0A(F T&  <T!@pA(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**B(FZ!p T&  <T!@Z!p 0 B(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**C(Fu T&  <T!@u, C(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0D(F T&  <T!@D(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsys0**E(F'& T&  <T!@'&E(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**F(Fph T&  <T!@phF(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0G(F _y T&  <T!@ _yL G(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**H(F  T&  <T!@  H(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**I(Fi< T&  <T!@i<P XI(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0J(F_v, T&  <T!@_v,J(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**K(F,;u T&  <T!@,;u K(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**L(F T&  <T!@ 8L(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0M(FHX T&  <T!@HXM(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**N(F2- T&  <T!@2-<N(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll2\w**O(FAnր T&  <T!@Anր@ O(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0P(F,i+ T&  <T!@,i+P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**Q(F T&  <T!@Q(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**R(F$X< T&  <T!@$X< l R(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0S(FD T&  <T!@D S(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**T(Fc T&  <T!@cLT(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll2\w**U(FZ T&  <T!@Z 0 U(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0V(F T&  <T!@V(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**W(F& T&  <T!@& W(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dlll**X(F T&  <T!@ X(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dllrfI**Y(F67mO T&  <T!@67mOY(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllot%**Z(FcQ T&  <T!@cQ l Z(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0[(F7 T&  <T!@7[(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerfI0**\(Fy T&  <T!@yT\(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllot%**](FzL  T&  <T!@zL p](FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem\wbem\WmiPer T&  <T@Nm]  ^(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFOperational ElfChnk^(F(F^(F(Fhxb9Q=Gf$WfK ? MF i&0**^(FNm]  T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@Nm]  ^(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**_(F@  T&  <T!@@ _(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**`(F2  T&  <T!@2 `h `(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**0a(F f;  T&  <T!@ f; |a(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**b(F<  T&  <T!@< Pb(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dlll**c(F>  T&  <T!@> AbOA1C.=c(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllt.**d(F5ǭ>  T&  <T!@5ǭ> AbOA1C.=d(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dllWmiP**(e(F5ǭ>  T&  <T!@5ǭ> ~9 ~9 le(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iEm>B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMIG[Id .f3 ClientMachine _User 2?ClientProcessId &} Component &$g Operation (QJ ResultCode .xb PossibleCause N{93646E37-C997-4AE0-9B83-0F40D23331C4}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**f(F)>  T&  <T!@)> ~9 ~9 Lf(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{85859DCE-EB3F-4064-B38C-BA814E10CB83}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownIN**g(F)>  T&  <T!@)> ~9 ~9 (g(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{2CDF654B-CE23-4141-927B-1EAE8F361457}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**h(F)>  T&  <T!@)> ~9 ~9 (h(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{E416646C-9B09-4A1C-BE71-C8A76A5043A3}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownin**i(F)>  T&  <T!@)> ~9 ~9 Li(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{0D670EF8-6769-428E-9DCA-BA1FE675A953}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownem**j(F)>  T&  <T!@)> ~9 ~9 Lj(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{3EC30F53-67C9-4D26-A15F-91F0810C2260}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**k(F>  T&  <T!@> ~9 ~9 Lk(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{799CDDE9-1AC7-4DCE-878B-DE12C33F4EE0}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownna**l(F\H  T&  <T!@\H ~9 ~9  l(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dlla**m(F$NI  T&  <T!@$NI ~9 ~9  m(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**n(Fj\  T&  <T!@j\ ~9 ~9  n(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllWin**o(Fy}\  T&  <T!@y}\ ~9 ~9 < L o(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllWin** p(F\  T&  <T!@\ ~9 ~9 p(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllWMI **q(F7a  T&  <T!@7a ~9 ~9  q(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN({39127EAA-B50A-0001-BB7E-12390AB5DC01}FILF-APP-RECNT AUTHORITY\SYSTEMdUnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor2Unknown2\w**r(F  T&  <T!@ ~9 ~9 P $r(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0s(F@  T&  <T!@@ ~9 ~9  s(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**t(F  T&  <T!@ ~9 ~9 4 t(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll2\w**u(Feod  T&  <T!@eod ~9 ~9  u(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll//m**0v(Fbu  T&  <T!@bu ~9 ~9  v(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllB2D0**w(FIB  T&  <T!@IB  PD w(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllndo**x(F2  T&  <T!@2  P x(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll '2**0y(Fy(  T&  <T!@y(  P y(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\SYS0**z(Fq  T&  <T!@q  P| (z(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dlloft**{(Fq  T&  <T!@q  Ph {(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll**0|(FW  T&  <T!@W  Pl|(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllvice0**}(Fh(  T&  <T!@h(  Px }(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllona**~(F|  T&  <T!@|  Pt ~(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllona**0(Fl*  T&  <T!@l*  Px(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F^Y  T&  <T!@^Y  Pd (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(F/ T&  <T!@/ P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0(F@ T&  <T!@@ Px(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F F: T&  <T!@ F: P8 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(Fat T&  <T!@at P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0(F_ T&  <T!@_ Px(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(FK T&  <T!@K0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(FF T&  <T!@F0x(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0(F؛ T&  <T!@؛0(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F T&  <T!@0 t(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**(F]~H T&  <T!@]~H0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0(FqY T&  <T!@qY0P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F>  T&  <T!@> 0\(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllona**(F T&  <T!@0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0(F<  T&  <T!@< 0| (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(FX T&  <T!@X0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(Fꪼ T&  <T!@ꪼ0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0(F E  T&  <T!@ E 0h (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(FpE T&  <T!@pE0 ` (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**(F%` T&  <T!@%`0p(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllona**0(F;q T&  <T!@;q0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F8; T&  <T!@8;Pt(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(F^ T&  <T!@^P0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllona**0(Fի$ T&  <T!@ի$P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(FrUo T&  <T!@rUoP\ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllona**(FT' T&  <T!@T'P< H (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllona**0(FO| T&  <T!@O|P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F2 T&  <T!@2P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**(Fx T&  <T!@xP`(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllona**0(FsQ T&  <T!@sQPT (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(Fm T&  <T!@mP(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(Fn+ T&  <T!@n+P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0(FA= T&  <T!@A=P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F? T&  <T!@?P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**(F] T&  <T!@] 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0(F< T&  <T!@< 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(F49 T&  <T!@49 0 $ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**(F(xY T&  <T!@(xY 0  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(F4 T&  <T!@4 0(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllDBAF0**(F=+ T&  <T!@=+ 0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMic**(FP7D T&  <T!@P7DD@(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllt**0(F U T&  <T!@ U(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllt IW0**(Fj T&  <T!@j0(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllvit**(F T&  <T!@D (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll<**0(Fw'_ T&  <T!@w'_(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllSmbS0**(F֍T T&  <T!@֍T P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll69E**(F=в T&  <T!@=вT(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0(F>- T&  <T!@>-x(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F T&  <T!@ @(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**(Fˁ\ T&  <T!@ˁ\ H(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(Fn T&  <T!@n (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**(FF T&  <T!@F<(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll<**(Fÿ T&  <T!@ÿ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(FO1  T&  <T!@O1  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(Fj T&  <T!@j (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**(FP T&  <T!@PH (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(Fj T&  <T!@jx(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(F>t  T&  <T!@>t  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(FS@ T&  <T!@S@ P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(F<$o T&  <T!@<$o P,(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(F\ T&  <T!@\ P@ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll**(F+' T&  <T!@+' Pl `(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll**0(F?9 T&  <T!@?9 P\ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(F&:[ T&  <T!@&:[ PT (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(F T&  <T!@ P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(F T&  <T!@ P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(Frp5 T&  <T!@rp5 PD (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**(F T&  <T!@ P  (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(F~ T&  <T!@~ P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(F T&  <T!@ Pp (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll**(F\@ T&  <T!@\@ P4(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**0(F Q T&  <T!@ Q P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(FrgÚ T&  <T!@rgÚ P\ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll**(F T&  <T!@ Pt (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll**0(F? T&  <T!@? P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(FNQ T&  <T!@NQ 0 P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**(F T&  <T!@P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(Fe T&  <T!@eP(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**(FZd  T&  <T!@Zd P `(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll <T T&  <Tt-@S~g P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Rational ElfChnk(FB)F(FB)F.;=քWf K ? MF g.ك&0**(FS~g  T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@S~g P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0(F j  T&  <T!@ j P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(Fŷ  T&  <T!@ŷ P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(F] ! T&  <T!@] !P\(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0(F! T&  <T!@!P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**(FMco! T&  <T!@Mco!P \(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlld(F**(Fnn! T&  <T!@nn!P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(F i! T&  <T!@ i!PX (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllId0**(FvQ" T&  <T!@vQ"P<(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllbe**(F":q" T&  <T!@":q"P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/Op**0(F[Ⓜ" T&  <T!@[Ⓜ"Px(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll> ~0**(Ff" T&  <T!@f"P` d(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllare**(F|L$# T&  <T!@|L$#P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll6A5**0(F[d5# T&  <T!@[d5#Px(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**(F7# T&  <T!@7#PL (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(Fw# T&  <T!@w#P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllod **0(F4# T&  <T!@4#Px(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll{7990**(F٧\1$ T&  <T!@٧\1$P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(Fܹ$ T&  <T!@ܹ$P\l (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0(F{N$ T&  <T!@{N$P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**(F$ T&  <T!@$P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**(FѨnK% T&  <T!@ѨnK%PH x(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dlltiv**0(FwM% T&  <T!@wM%P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**(F9ܖ% T&  <T!@9ܖ%P$d(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**(FT=% T&  <T!@T=%PxP(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**0(Fޣ& T&  <T!@ޣ&P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F{5bO& T&  <T!@{5bO&0\(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**(Fup2& T&  <T!@up2&0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(FCwt& T&  <T!@Cwt&0$ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F{& T&  <T!@{&0 L (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**(FT' T&  <T!@T'0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(F84Gf' T&  <T!@84Gf'0 (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(Fkw' T&  <T!@kw'P< (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll**(F( T&  <T!@(P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0(F,K( T&  <T!@,K(P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F!a( T&  <T!@!a(P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**(F1S( T&  <T!@1S(PX (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**0(F( T&  <T!@(P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F-) T&  <T!@-)P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(Fcm) T&  <T!@cm)Pd (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**0(F>~) T&  <T!@>~)P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F') T&  <T!@')P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**(Fѿ&/* T&  <T!@ѿ&/*P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(F$U1* T&  <T!@$U1*P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F ~* T&  <T!@ ~*PP (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**(F5* T&  <T!@5*P@ (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0(F0W* T&  <T!@0W*P(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(F}P-+ T&  <T!@}P-+PD(FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**(Ft҅+ T&  <T!@t҅+P (FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0)FK'+ T&  <T!@K'+P4 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)F!+ T&  <T!@!+P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**)Fv8, T&  <T!@v8,D )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**0)F#I, T&  <T!@#I,)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)F)\, T&  <T!@)\,$ )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**)F&x, T&  <T!@&x,0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0)F:, T&  <T!@:, )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)F1bH- T&  <T!@1bH-)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**)FV?- T&  <T!@V?-)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**P )Fd- T&  <T!@d-~9 W9  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational كEm>B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .ք3 ClientMachine  _User 2.?ClientProcessId &g} Component &g Operation (J ResultCode .xb PossibleCause N({39127EAA-B50A-0000-AB82-12390AB5DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '420'2UnknownvitP**0 )Fv- T&  <T!@v-~9 W9  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000** )Fec- T&  <T!@ec-~9 W9 P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit** )Fǀ Q. T&  <T!@ǀ Q.~9 W9  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0 )Fk-gb. T&  <T!@k-gb.$0P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**)Fm. T&  <T!@m.$0(d)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllvit**)FzL/ T&  <T!@zL/$0$)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllvit**0)F7/ T&  <T!@7/$0l)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**)F_/ T&  <T!@_/$0<)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**)FA/ T&  <T!@A/$0H )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllvit**0)F݂ / T&  <T!@݂ /$0)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**)F lS0 T&  <T!@ lS0$0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**)Fi0 T&  <T!@i0Pp)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0)Fz0 T&  <T!@z0PT)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**)Fc7/0 T&  <T!@c7/0P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**)FQ1 T&  <T!@Q1P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0)Fu-1 T&  <T!@u-1P)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**)Fމ1 T&  <T!@މ1P$)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllvit**)F9/"1 T&  <T!@9/"1Px)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllvit**0)Fy1 T&  <T!@y1P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**)F\)2 T&  <T!@\)2Ph)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**)F2 T&  <T!@2P\ )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllvit**0)FKhL2 T&  <T!@KhL2P)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000** )F2 T&  <T!@2P )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**!)F.=3 T&  <T!@.=3P !)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0")F$F3 T&  <T!@$F3P ")FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**#)Fqct3 T&  <T!@qct3Pd #)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllvit**$)F3 T&  <T!@3P$)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0%)Fg3 T&  <T!@g3P%)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**&)FBHDH4 T&  <T!@BHDH4P &)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**')F*4 T&  <T!@*4P|')FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllvit**0()F(r4 T&  <T!@(r4P ()FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**))FVY4 T&  <T!@VY4P ))FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit***)Fy@M5 T&  <T!@y@M5P *)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0+)F^5 T&  <T!@^5Pp +)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**,)Fߡ5 T&  <T!@ߡ5P,)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**-)F&6 T&  <T!@&6P-)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0.)F[^6 T&  <T!@[^6P .)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**0/)F/6 T&  <T!@/608/)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**0)F56 T&  <T!@560x 0)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**1)Fq7 T&  <T!@q70p 1)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll 00**2)Fu7 T&  <T!@u70 2)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**03)F/7 T&  <T!@/70D3)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**4)F1w7 T&  <T!@1w70l 4)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll 00**5)FH;8 T&  <T!@H;80, 5)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllvit**06)F)mK8 T&  <T!@)mK80p 6)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**7)F;lv8 T&  <T!@;lv80 7)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**8)F8 T&  <T!@8,Px 8)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllvit**09)F!8 T&  <T!@!8,Pp 9)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**:)F߯&9 T&  <T!@߯&9,P :)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**;)FN9 T&  <T!@N9,P ;)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0<)F9U9 T&  <T!@9U9,P <)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**=)F9 T&  <T!@9,P P=)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**>)FJ$S: T&  <T!@J$S:,PT>)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0?)Fd,d: T&  <T!@d,d:,P?)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**@)F!ً: T&  <T!@!ً:,P @)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**A)F; T&  <T!@;,P XA)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0B)F; T&  <T!@;,Px B)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000Rational ElfChnkC)F)FC)F)Fx@6|#=n WfK ? MF &0**C)FA; T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@A;,P C)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**D)FA; T&  <T!@A;,Ph D)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0E)F; T&  <T!@;,PE)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**F)FR< T&  <T!@R<,P F)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**G)F;$l< T&  <T!@;$l<,PG)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0H)F1|< T&  <T!@1|<,P8 H)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlld(F0**I)F)< T&  <T!@)<,P\I)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**J)FZE= T&  <T!@ZE=P J)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0K)Fpi/= T&  <T!@pi/=PpK)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbe0**L)F<:Z= T&  <T!@<:Z=Pl L)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll/Op**M)FZ= T&  <T!@Z=Px @ M)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0N)Fs:= T&  <T!@s:=P N)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllare0**O)F6{ > T&  <T!@6{ >PO)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll6A5**0P)F_^> T&  <T!@_^>PP)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**Q)Fĕ> T&  <T!@ĕ>P 8 Q)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**R)F> T&  <T!@>P R)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllod **S)Fr\7? T&  <T!@r\7?P$S)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0T)FG? T&  <T!@G?PT)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**U)F0%r? T&  <T!@0%r?P@X U)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**V)F*? T&  <T!@*?P V)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0W)F}? T&  <T!@}?PX W)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltiv0**X)FO"@ T&  <T!@O"@P8 X)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dlltiv**Y)F@ T&  <T!@@PP T Y)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Z)Fy@ T&  <T!@y@PhZ)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**[)FE@ T&  <T!@E@P0|[)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**\)F3 OA T&  <T!@3 OAP4T \)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0])F|pJ`A T&  <T!@|pJ`AP ])FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**^)FA T&  <T!@AP0 ^)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll**_)FB T&  <T!@BP_)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0`)FB T&  <T!@BPl`)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**a)F>B T&  <T!@>BPha)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll**b)FWB T&  <T!@WBPXb)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0c)F5cB T&  <T!@5cBPlc)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**d)FB T&  <T!@BP dd)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**e)F EN T&  <T!@> EN )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)FN T&  <T!@N*0)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)F~N T&  <T!@~N*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**)FGHO T&  <T!@GHO*0 <)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)F'XO T&  <T!@'XO*0)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)FhO T&  <T!@hO*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**)F% P T&  <T!@% P*0P)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)Fd_ P T&  <T!@d_ P*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)F8P T&  <T!@8P*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**)FmQP T&  <T!@mQP*0t)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)F0P T&  <T!@0P*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)FoP T&  <T!@oP*0t)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll#F**)F`Q T&  <T!@`Q*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)FpqQ T&  <T!@pqQ*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)F0Q T&  <T!@0Q*0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**)FaKR T&  <T!@aKR*0xX)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)F #R T&  <T!@ #R  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllws-W0**)F [R T&  <T!@ [R  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**)FKR T&  <T!@KR  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)F R T&  <T!@ R T)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)F]S T&  <T!@]S )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**)FFrxS T&  <T!@FrxS d )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)FoS T&  <T!@oS )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**)F0~S T&  <T!@0~S  )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**)F_+T T&  <T!@_+T x \ )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)FI` T&  <T!@w>`P()FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)FW%a T&  <T!@W%aP)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**)FTqa T&  <T!@TqaP\l)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0)Fa T&  <T!@aP()FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)Fƨa T&  <T!@ƨaP$ )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**)F3$b T&  <T!@3$bP< )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0)F`X4b T&  <T!@`X4bP()FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)FEbb T&  <T!@EbbP)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**)FWb T&  <T!@WbP,)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0)FHUb T&  <T!@HUbPx)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)Fs@c T&  <T!@s@cP@)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0)F%c T&  <T!@%cP4)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)F4ՠc T&  <T!@4ՠcP0X)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**)FMc T&  <T!@McP0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**)F~f T&  <T!@M >fP< )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll#F**)FCg T&  <T!@Cg0 )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0)F 8g T&  <T!@ 8g0)FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***FR?g T&  <T!@R?gP$*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll#F***F*Ʒg T&  <T!@*ƷgP(< *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*Fn#g T&  <T!@n#gP *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***Fg T&  <T!@gP< *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F***Fq_mh T&  <T!@q_mhPT H*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*F,}h T&  <T!@,}hPL*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***F&9h T&  <T!@&9hPd *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll#F***FrX i T&  <T!@rX iP *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F0i T&  <T!@0iPt*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0** *F3,_i T&  <T!@3,_iPx *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F** *Fi T&  <T!@iP  *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0 *Fkwi T&  <T!@kwiP *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0** *F j T&  <T!@ jP  *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F** *Fz9j T&  <T!@z9jPX *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F_j T&  <T!@_jP *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***Fyj T&  <T!@yjP\ *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F***FGk T&  <T!@GkP <*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F4Ik T&  <T!@4IkPL*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***Fpk T&  <T!@pkP*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F***Fk T&  <T!@kP*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F[k T&  <T!@[kP*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***F,2'l T&  <T!@,2'lP l*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F***F=l T&  <T!@=lP@*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F$l T&  <T!@$lP\*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***Fl T&  <T!@lP *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F***FIQm T&  <T!@IQmP*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F{eam T&  <T!@{eamP\*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllws-W0***Fm T&  <T!@mP4 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dlls-W***F>n T&  <T!@>nP*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0*F|Zn T&  <T!@|ZnP0*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***F x;n T&  <T!@ x;nP@ *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dlls-W***F!n T&  <T!@!n0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0 *F;n T&  <T!@;n0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**!*F%n T&  <T!@%n0 !*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**("*Flo T&  <T!@lo0"*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000,TServerFeatureProviderwmiprvse.exe%windir%\system32\wbem\servercompprov.dllI<(**H#*FXo T&  <T!@Xo0 #*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exe %systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**$*F>/io T&  <T!@>/ioIjEi@$*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%*F yo T&  <T!@ yoIjEi%*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&*F$>o T&  <T!@$>oP $&*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**'*FC+p T&  <T!@C+pPt'*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0(*F K,p T&  <T!@ K,pPl(*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)*FzWp T&  <T!@zWpP )*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****Fsp T&  <T!@spP **FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0+*Fp T&  <T!@pP+*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**,*F q T&  <T!@ qP ,,*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll T&  <Tx )FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnk-*F*F-*F*Fh.4t=n WfK ? MF &0**-*Fc"q T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@c"qP -*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0.*F>oq T&  <T!@>oqPH.*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**/*F*Fh8:u T&  <T!@h8:uP` 0>*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**?*Fru T&  <T!@ruPx ?*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**0@*F_Ju T&  <T!@_JuP@*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**A*F2u T&  <T!@2uP4 A*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dlltiv**B*FMev T&  <T!@Mev0 B*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0C*Fvv T&  <T!@vv0hC*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**D*F9v T&  <T!@9v0 PD*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**E*Fw T&  <T!@w0  E*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0F*FD(w T&  <T!@D(w0tF*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**G*Fsbw T&  <T!@sbw0 G*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**H*Fwgw T&  <T!@wgw0H*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0I*Fw T&  <T!@w0I*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**J*F~ x T&  <T!@~ xX J*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll**K*F.~x T&  <T!@.~xx X K*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**0L*Fۦ x T&  <T!@ۦ x L*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**M*F^@x T&  <T!@^@x8 M*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**N*F0y T&  <T!@0yPN*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0O*F_Ay T&  <T!@_Ay O*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**P*FHhy T&  <T!@HhylP*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Q*Ffy T&  <T!@fy Q*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0R*Fe+y T&  <T!@e+yh R*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**S*Fmz T&  <T!@mz pS*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**T*Fz T&  <T!@zL$ T*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll**0U*F8Az T&  <T!@8AzU*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**V*Fz T&  <T!@z V*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**W*FI{ T&  <T!@I{ W*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0X*FY{ T&  <T!@Y{` X*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Y*FG{ T&  <T!@G{ Y*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Z*FoZ{ T&  <T!@oZ{ LZ*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0[*F\ | T&  <T!@\ |` [*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**\*F+6O| T&  <T!@+6O|  \*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**]*F?| T&  <T!@?|X]*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0^*F(rt| T&  <T!@(rt|<^*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**_*Fɜ| T&  <T!@ɜ|x_*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**`*FMa} T&  <T!@Ma} `*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0a*F&@r} T&  <T!@&@r}0( a*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**b*F`Ѯ} T&  <T!@`Ѯ}0b*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**c*F!~ T&  <T!@!~00 c*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0d*F=%~ T&  <T!@=%~0 d*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**e*FZ;P~ T&  <T!@Z;P~00 e*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**f*F'~ T&  <T!@'~0 < f*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**g*FQt~ T&  <T!@Qt~0 g*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0h*FS~ T&  <T!@S~0 h*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**i*Fq~ T&  <T!@q~0i*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**j*FTz T&  <T!@Tz0 |j*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0k*Fc T&  <T!@c0 k*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**l*FFw T&  <T!@Fw0<l*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllst.**m*F<- T&  <T!@<-04m*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllst.**0n*Fg = T&  <T!@g =0<n*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**o*FFe T&  <T!@Fe4o*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllst.**p*F@ဵ T&  <T!@@ဵP p*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllst.**0q*FمR T&  <T!@مR<q*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**r*F&* T&  <T!@&* r*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**s*Fb沒 T&  <T!@b沒 0s*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0t*Fa% T&  <T!@a%t*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**u*FG5́ T&  <T!@G5́H u*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllst.**v*FE T&  <T!@E v*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0w*FaV T&  <T!@aV<w*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**x*FOw T&  <T!@OwH x*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllst.**y*F2Iz T&  <T!@2Iz t y*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0z*FT  T&  <T!@T 4 z*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**{*F775 T&  <T!@775P{*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllst.**|*Fڤ T&  <T!@ڤP |*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllst.**0}*F, T&  <T!@,l }*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**~*F}R胵 T&  <T!@}R胵  ~*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.***F}$[ T&  <T!@}$[p H *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllst.**0*Fp T&  <T!@pP *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***Fu[ T&  <T!@u[ 7tx*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllst.***F@Y T&  <T!@@Y 7 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0*F}4l! T&  <T!@}4l! 7l *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***F iQ T&  <T!@ iQ 7(*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.***F. T&  <T!@. 0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0*Fօ T&  <T!@օ 0@*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***FU  T&  <T!@U  0X *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllst.***FIv T&  <T!@Iv 0*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0*Fӆ T&  <T!@ӆ 0l *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***F4 T&  <T!@4 0, *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllst.***Fp) T&  <T!@p) 0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0*F0h9 T&  <T!@0h9 0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***F`!a T&  <T!@`!a 0 x *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.***Fw4܇ T&  <T!@w4܇ 0*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0*Ft쇵 T&  <T!@t쇵 0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***FE T&  <T!@E 0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.***Fq❈ T&  <T!@q❈ 04 \*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dllst.**0*FB T&  <T!@B 0<*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***F2Lj T&  <T!@2Lj *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.***F0A T&  <T!@0A*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0*F[R T&  <T!@[RD*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0***FV} T&  <T!@V}Xt *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllst.***F T&  <T!@ x*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllerv**0*F\ T&  <T!@\l *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllverM0***F, T&  <T!@, *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy***Fsqj T&  <T!@sqjT *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0*FKǶ T&  <T!@KǶ\*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0***Fn T&  <T!@n *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy***FàKb T&  <T!@àKb *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0*F@j T&  <T!@@j\*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0***F T&  <T!@|  *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll\Sy***FB?  T&  <T!@B?  P*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0*FWU T&  <T!@WU| *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0em32\wbem\Wm T&  <T@Ht *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal ElfChnk*F+F*F+F(8"ZR/=n WfK ? MF &0***FH T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@Ht *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll\t***F T&  <T!@ *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*F3(Ќ T&  <T!@3(Ќ(*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0***F: T&  <T!@:P*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts***FT T&  <T!@TPx *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*F$󂍵 T&  <T!@$󂍵P *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlld(F0***FV= T&  <T!@V=P t *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll***Fu% T&  <T!@u%0*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*F85 T&  <T!@850 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbe0***FZ@] T&  <T!@Z@]0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll/Op***F9 ؎ T&  <T!@9 ؎0  *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*FƠ莵 T&  <T!@Ơ莵0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllare0***Fyf T&  <T!@yf0 t*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll6A5***F򊏵 T&  <T!@򊏵0*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*Fn T&  <T!@n0X *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0***Fcҏ T&  <T!@cҏ0t*FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllod ***FGA> T&  <T!@GA>0 *FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0*F T&  <T!@>+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**+F/e T&  <T!@/e X+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**0 +Ft+* T&  <T!@t+* +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0** +FR T&  <T!@R  +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs** +F]ۣ T&  <T!@]ۣ +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**0 +FWܣ T&  <T!@Wܣ +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0** +Fz  T&  <T!@z ( +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllrvs**+F~ T&  <T!@~t +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllexe**0+F h̏ T&  <T!@ h̏( +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**+F6i5 T&  <T!@6i5$+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllrvs**+F-1 T&  <T!@-1@+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**0+FkCB T&  <T!@kCBH+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**+F p T&  <T!@ p +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**+F  T&  <T!@ | +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**0+FcZm T&  <T!@cZmD +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**+F, T&  <T!@,+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvsexe%Syste T&  <Tem@[ 7| +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Rindows-WMI-Activity/Operational 000nal ElfChnk+Ft+F+Ft+F PLcD=n WfK ? MF &0**+F[ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@[ 7| +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll\t**0+F7= T&  <T!@7= 7H+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**+FTӦ T&  <T!@TӦ 7 X +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**+F1J T&  <T!@1J 7LH +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0+FM[ T&  <T!@M[ 7 +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**+F}ェ T&  <T!@}ェ 70+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlld(F**+Fj- T&  <T!@j- 7T 8 +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**0+F  T&  <T!@  7+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**+Fgة; T&  <T!@gة; 7| +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllbe** +F8 T&  <T!@8 7| 0 +FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll/Op**0!+Fݬ T&  <T!@ݬ 7 !+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**"+FCl訵 T&  <T!@Cl訵 7$ 0"+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllare**#+Fc T&  <T!@c 7x #+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll6A5**0$+Fs T&  <T!@s 7P$+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**%+FD] T&  <T!@D] 7 %+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**&+F&n T&  <T!@&n 7 &+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllod **0'+F2P& T&  <T!@2P& 7H '+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(+F5n>R T&  <T!@5n>R 7 0 (+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**)+Fחɪ T&  <T!@חɪP@)+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0*+F'J٪ T&  <T!@'J٪P*+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**++F T&  <T!@P ++FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**,+F| T&  <T!@|P $,+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**0-+F ] T&  <T!@ ]P( -+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**.+FhV# T&  <T!@hV#P |.+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**/+FJ7 T&  <T!@J7P /+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**00+FiA T&  <T!@iAP 0+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**1+F8zn T&  <T!@8znP 1+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**2+F2ᬵ T&  <T!@2ᬵP$ 2+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**03+F T&  <T!@P4 3+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**4+FE T&  <T!@EP 4+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**5+F= T&  <T!@=P $ 5+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**06+F] T&  <T!@]P6+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**7+Ftuϭ T&  <T!@tuϭP (7+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**8+FnF T&  <T!@nFP, 8+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**09+Fg 3W T&  <T!@g 3WP| 9+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**:+F#&ـ T&  <T!@#&ـP`:+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**;+F G T&  <T!@ GP,8 ;+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll**0<+F  T&  <T!@ P| <+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**=+Fq%9 T&  <T!@q%9P=+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**>+FM\ T&  <T!@M\P >+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0?+FѼ T&  <T!@ѼP| ?+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@+Fs T&  <T!@sP @+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**A+F]^ T&  <T!@]^P A+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0B+F?o T&  <T!@?oP B+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**C+F>b T&  <T!@>bP C+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**D+Fm T&  <T!@mPpD+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll**0E+Fpv# T&  <T!@pv#P E+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**F+F{5N T&  <T!@{5NPHlF+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll**G+FSTı T&  <T!@STıP4G+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll*F**0H+FCձ T&  <T!@CձPH+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**I+Fw T&  <T!@wP I+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**J+FD T&  <T!@DPJ+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0K+FGm T&  <T!@GmP K+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**L+FO T&  <T!@OPL+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dll&**M+Fk˕ T&  <T!@k˕PM+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dllj**N+Fjg T&  <T!@jgPl N+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**O+F]j2 T&  <T!@]j20 O+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllll**0P+F < T&  <T!@ <P+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZb0**Q+F1l T&  <T!@1l  Q+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**R+Fة޳ T&  <T!@ة޳ 8R+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**0S+F2i T&  <T!@2iS+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**T+F T&  <T!@xT+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**U+F< T&  <T!@<pU+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll****0V+F턠 T&  <T!@턠PV+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**W+FU۴ T&  <T!@U۴`$ W+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll&**X+FHB T&  <T!@HB t X+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0Y+FSS T&  <T!@SSY+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**Z+F { T&  <T!@ {< Z+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll&**[+FX T&  <T!@X [+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0\+FG~# T&  <T!@G~#\+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**]+F%7 T&  <T!@%7P ]+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll&**^+FZ T&  <T!@Z^+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0_+F󸶵 T&  <T!@󸶵_+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**`+FH㶵 T&  <T!@H㶵`+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**a+Fi T&  <T!@i P 8a+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0b+F6k T&  <T!@6k P b+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**c+F4 # T&  <T!@4 # PDc+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**d+F  T&  <T!@  Pd+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0e+Ff T&  <T!@f PP e+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**f+FدH T&  <T!@دH P8 0f+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll&**g+F= T&  <T!@= P g+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0h+FcѸ T&  <T!@cѸ PPh+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**i+F~W T&  <T!@~W P\i+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**j+Fs T&  <T!@s P j+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0k+FK5 T&  <T!@K5 P k+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**l+F T&  <T!@ P,l+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll**m+F& T&  <T!@& P0m+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0n+F_ 7 T&  <T!@_ 7 Pn+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**o+Fj T&  <T!@j Pdo+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**p+FMdB纵 T&  <T!@MdB纵 P p+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0q+F_ T&  <T!@_ Pq+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**r+F T&  <T!@ Plr+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**s+F T&  <T!@P8 s+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**0t+F礜 T&  <T!@礜Pt+FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0 <T!@ . L.$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVIC**/$F4\M T&  <T!@4\M L/$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**0$Fn0 T&  <T!@n0 0$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIN3**01$FE2 T&  <T!@E2 1$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllfIns0**2$FO T&  <T!@O 2$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**3$FՃ T&  <T!@Ճ2 | 3$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIns**04$F` T&  <T!@`2L4$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRVIC0**5$FB T&  <T!@B2P5$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**6$F9$5 T&  <T!@9$5PZ6$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**07$F]>C T&  <T!@]>CPZ 7$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRVIC0**8$FBne T&  <T!@BnePZ8$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**9$F T&  <T!@PZ 9$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllm**0:$F T&  <T!@PZ :$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRMIN0**;$Fks T&  <T!@ksPZ ;$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**<$F T&  <T!@PZ <$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWM**=$F^] T&  <T!@^]PZ,=$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllIN3**0>$Fmѧ T&  <T!@mѧPZ >$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllfIns0**?$FP T&  <T!@PPZ,D?$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllIns**@$FM T&  <T!@MPZD < @$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllIns**0A$FZP[ T&  <T!@ZP[PZ A$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRVIC0**B$F T&  <T!@PZPB$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllIns**C$F= T&  <T!@=PZ C$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**0D$Fm~ T&  <T!@m~PZD$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRVIC0Provwmipr T&  <Tl@.PZ E$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000R#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fational ElfChnkE$F$FE$F$F(Xt2+=n WfK ? MF &0**E$F. T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@.PZ E$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**F$F, T&  <T!@,P F$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**G$F1:d T&  <T!@1:dP`G$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0H$Fh T&  <T!@hP H$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**I$FM T&  <T!@MPX I$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**J$Fg T&  <T!@gPL,J$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0K$F !s T&  <T!@ !sPK$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**L$FR;. T&  <T!@R;.PL$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**M$F  T&  <T!@ P$ M$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0N$F&& T&  <T!@&&PTN$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**O$F^mJ T&  <T!@^mJPL O$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllst.**P$Fq T&  <T!@qP , P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0Q$F) T&  <T!@)PQ$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**R$FA T&  <T!@AP R$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**S$F} T&  <T!@}P 8 S$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllR**T$FgQ T&  <T!@gQP $ T$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0U$Fȋ T&  <T!@ȋPU$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllipro0**V$F煦 T&  <T!@煦P $ V$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**W$FȐ.  T&  <T!@Ȑ. PW$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0X$Fc8U>  T&  <T!@c8U> PX$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**Y$F b  T&  <T!@ b P` Y$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllst.**Z$Fb  T&  <T!@b  Z$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0[$FD  T&  <T!@D [$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**\$F{1! T&  <T!@{1!, \$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllst.**]$F ! T&  <T!@ !0l]$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllsys**0^$F! T&  <T!@!0 ^$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**_$FK! T&  <T!@K!0 x_$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**`$F=G" T&  <T!@=G"0P `$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllsys**0a$FߏV" T&  <T!@ߏV"0a$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**b$Fx" T&  <T!@x"0b$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlly**c$FjW" T&  <T!@jW"0 c$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0d$F~ # T&  <T!@~ #0d$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\Sy0**e$F)# T&  <T!@)#0e$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**f$F}4# T&  <T!@}4#0x f$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0g$Fcg# T&  <T!@cg#0x g$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**h$FƖ# T&  <T!@Ɩ#0@ h$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**i$F Xm$ T&  <T!@ Xm$0<i$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0j$F L3o$ T&  <T!@ L3o$0, j$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**k$FY$ T&  <T!@Y$0<k$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**l$Fv% T&  <T!@v%0 pl$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0m$Fl"% T&  <T!@l"%Pm$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**n$FG% T&  <T!@G%P n$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**o$FF01% T&  <T!@F01%PLdo$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0p$F% T&  <T!@%Pp$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\Sy0**q$FJ'I% T&  <T!@J'I%P8q$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**r$F<2w& T&  <T!@<2w&P Dr$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0s$Fb& T&  <T!@b&P\s$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**t$FY& T&  <T!@Y&Pt$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**u$Fp:)' T&  <T!@p:)'Pdu$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0v$F(~:' T&  <T!@(~:'P v$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**w$FOxY' T&  <T!@OxY'P$w$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllrvs**x$F%' T&  <T!@%'P8x$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**0y$F_' T&  <T!@_'Py$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**z$F( T&  <T!@(Ph Tz$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**{$F5( T&  <T!@5(Ph x{$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll$F**0|$FK( T&  <T!@K(P|$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll$F0**}$F޽( T&  <T!@޽(P <}$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll $F**~$FGQ) T&  <T!@GQ)P ~$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll $F**0$F0S) T&  <T!@0S)P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$FDGw) T&  <T!@DGw)P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll $F**$FFF) T&  <T!@FF)P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll $F**0$F3* T&  <T!@3*Pl$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$FH&* T&  <T!@H&*P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**$F>* T&  <T!@>*P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**0$Ff* T&  <T!@f*P8$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F(* T&  <T!@(*PD$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll$F**$F@Z+ T&  <T!@@Z+P <$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**0$FXm+ T&  <T!@Xm+P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll$F0**$F+ T&  <T!@+P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll$F**$F , T&  <T!@ ,P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**0$FK"", T&  <T!@K"",P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$FID, T&  <T!@ID,PL $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**$F7, T&  <T!@7,P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$F**0$Fg_, T&  <T!@g_,P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F"C', T&  <T!@"C',P<$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll$F**$Fngs- T&  <T!@ngs-P0 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll$F**0$F(- T&  <T!@(-P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F=- T&  <T!@=-P< $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll$F**$F5. T&  <T!@5.P8D $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll$F**0$F6C7. T&  <T!@6C7.P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F*U. T&  <T!@*U.P8D $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**$Fm. T&  <T!@m.P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0$FƎ. T&  <T!@Ǝ.P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F ǚ / T&  <T!@ ǚ /PH $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dll**$F>/ T&  <T!@>/P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0$F%+Ŝ/ T&  <T!@%+Ŝ/P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$Fϻ/ T&  <T!@ϻ/PD$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**$FIA0 T&  <T!@IA0P $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0$FFR0 T&  <T!@FR0P8$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$FK)0 T&  <T!@K)0P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**$FP0 T&  <T!@P0P,$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll**0$F]v1 T&  <T!@]v1P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F1 T&  <T!@1P,$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll**$Fmǥ1 T&  <T!@mǥ10@$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0$FԴ1 T&  <T!@Դ1 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F1 T&  <T!@1 |$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll**$FxZX2 T&  <T!@xZX2  p $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0$F +%i2 T&  <T!@ +%i2 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F<2 T&  <T!@<2  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**$FO3 T&  <T!@O3  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0$Fy3 T&  <T!@y3  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$Ff;3 T&  <T!@f;3  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**$F}h3 T&  <T!@}h3   $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0$F[V3 T&  <T!@[V3 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F 3 T&  <T!@ 3   $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**$F[o4 T&  <T!@[o4 4 \$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll **0$F,4 T&  <T!@,4 x$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**$Fa4 T&  <T!@a4 H $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **$F#A"5 T&  <T!@#A"5 ,$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0$F`35 T&  <T!@`35  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$FO5 T&  <T!@O5 ,$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **$Fm_5 T&  <T!@m_5  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**$F5 T&  <T!@5 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0$FA5 T&  <T!@A5 T$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F6 T&  <T!@6 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**$F 6 T&  <T!@ 6 D$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**0$FZ6 T&  <T!@Z6 T$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0  < T&  <Tos@!ܷ6 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Rational 000Fational ElfChnk$F+%F$F+%F`xYb An=7mVmnWfmK ? pnMF mmYl&0**$F!ܷ6 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@!ܷ6 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**$F:7 T&  <T!@:7 <$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG$F**0$FquK7 T&  <T!@quK7 \$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F-fk7 T&  <T!@-fk7 l $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllI$F**$Fd̽7 T&  <T!@d̽7 D $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllJ$F**0$FB07 T&  <T!@B07 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F8 T&  <T!@8 D0$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllL$F**$F`8 T&  <T!@`8 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**$F8 T&  <T!@8 t $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0$Fp=ı8 T&  <T!@p=ı8  $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**$F?8 T&  <T!@?8 t $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**$FqR9 T&  <T!@qR90 p$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0$Fd9 T&  <T!@d90 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**$F[;9 T&  <T!@[;90$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**$F6: T&  <T!@6:0$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT$F**0$F]o: T&  <T!@]o:aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F+66: T&  <T!@+66:aP0 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllV$F**$Fb: T&  <T!@b:aP0D $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllW$F**0$F: T&  <T!@:aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F: T&  <T!@:aP8 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllY$F**$F!6z; T&  <T!@!6z;aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllZ$F**0$Fc|; T&  <T!@c|;aP $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F; T&  <T!@;aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\$F**$FN< T&  <T!@N<aP $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll]$F**0$Fnj0< T&  <T!@nj0<aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F&ݻM< T&  <T!@&ݻM<aP $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_$F**$F.F< T&  <T!@.F<aPT $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll`$F**0$F_< T&  <T!@_<aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$FB>= T&  <T!@B>=aP$ $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllb$F**$F҅= T&  <T!@҅=aP $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllc$F**0$F݅= T&  <T!@݅=aPh$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F = T&  <T!@ =aP x $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlle$F**$Fg7> T&  <T!@g7>aP8 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllf$F**0$F~TG> T&  <T!@~TG>aP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$Fl8g> T&  <T!@l8g>P,$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllh$F**$F4> T&  <T!@4>0 <$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli$F**0$F$> T&  <T!@$>0 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F+s? T&  <T!@+s?0H$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllk$F**$FS&? T&  <T!@S&?0l$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dlll$F**0$Fx ? T&  <T!@x ?0$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F? T&  <T!@?0| $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dlln$F**$Fv\]@ T&  <T!@v\]@0,4 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllo$F**0$F;`@ T&  <T!@;`@0X$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**$F{@ T&  <T!@{@0,4 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllq$F**$FkؑA T&  <T!@kؑA9P$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllot%**$F)A T&  <T!@)Ab#QMl;&W$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllSy**$F_O.A T&  <T!@_O.Ab#QMl;&W8 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dll:\Wi**($F_O.A T&  <T!@_O.AgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlEm>B3 ?+Aln g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI7m[Id .Vm3 ClientMachine m_User 2m?ClientProcessId &m} Component &nlg Operation (AnJ ResultCode .pnxb PossibleCause N{395E10D3-896D-4C7F-BBBB-2DF4277DFC7A}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**$F0A T&  <T!@0AgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlN{7756AAB6-B703-4446-8905-40776891D45F}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**$F0A T&  <T!@0AgAAx$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlN{2B65BD09-A09A-4405-86A2-DFC267FA4A68}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownvۛ**$F&FA T&  <T!@&FAgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlN{8EDE23C5-D6F1-4286-8082-D336B5C00E95}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowniv**$FMHA T&  <T!@MHAgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlN{68766DA2-E9DD-4CC4-A2B5-1E51050CF6CC}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownse**$FJA T&  <T!@JAgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlN{7636A09A-DA55-4C05-8E57-3D9891A41FBC}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownT**$FuTA T&  <T!@uTAgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational YlN{79EFC79D-5DDF-41F2-8EEC-6C3C5C11302F}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownws**0$FA T&  <T!@AgAA $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**$F]A T&  <T!@]AgAAt$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exetC:\Windows\System32\wbem\WmiPerfClass.dllp**$FlA T&  <T!@lAgAAt$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dllt**$F\#A T&  <T!@\#AgAAL \ $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dlloft** $Fr*A T&  <T!@r*AgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllows **$FA T&  <T!@AgAA4 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll{M**0$FpA T&  <T!@pAgAA$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**$F7A T&  <T!@7AgAA4 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dllows**$FrqgB T&  <T!@rqgB ( $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0$FpyB T&  <T!@pyBPx $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**$F:B T&  <T!@:BP( $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**$F C T&  <T!@ CPp $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0$F˩*C T&  <T!@˩*CP8 $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**$FhFC T&  <T!@hFCPp $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**$F#9:C T&  <T!@#9:CPt $FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exet%systemroot%\system32\wbem\wmiprov.dll**$F*{C T&  <T!@*{CP$FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllty**0%FĬC T&  <T!@ĬCP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**%F:D T&  <T!@:DP%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllty**%FTD T&  <T!@TDgAʺA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dllA**%F)4 D T&  <T!@)4 DgAA P%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%FcD T&  <T!@cDgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**%FmD T&  <T!@mDgAA %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**%FA2E T&  <T!@A2EgAAL X%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%FCE T&  <T!@CE%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**%FdE T&  <T!@dE4 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllI-A** %FvE T&  <T!@vE| %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0 %FE T&  <T!@E %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0** %F&F T&  <T!@&F< %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0 %FרF T&  <T!@רF %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0** %F0F T&  <T!@0F0 %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**%FF T&  <T!@F0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**%FCKG T&  <T!@CKG %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%F[G T&  <T!@[G %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**%FC|xG T&  <T!@C|xG %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**%F H T&  <T!@ H  %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%F]xH T&  <T!@]xH\%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**%F0H T&  <T!@0Hd %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllI-A**%Fa_H T&  <T!@a_H` %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%FNDH T&  <T!@NDH 0\%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**%F9H T&  <T!@9H 0` %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%F)tI T&  <T!@)tI 0%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllJ{M0**%F}tI T&  <T!@}tI 0T %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllI-A**%FUޘI T&  <T!@UޘIPT %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllI-A**%FJ T&  <T!@JP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%FJ&J T&  <T!@J&JPH %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**%F◟DJ T&  <T!@◟DJP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**%FJ T&  <T!@JPl%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%FJ T&  <T!@JP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0** %F3KJ T&  <T!@3KJP %FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**!%F{K T&  <T!@{KP $ !%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0"%FK T&  <T!@KPp "%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**#%FkΩK T&  <T!@kΩKP $ #%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**$%F҅=L T&  <T!@҅=LP$%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**0%%Fq[?L T&  <T!@q[?LP`%%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**&%F1aL T&  <T!@1aLP&%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllI-A**'%F?L T&  <T!@?LP8'%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0(%F7L T&  <T!@7LP8 (%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**)%FAM T&  <T!@AMP8 )%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dlltiv***%FuUM T&  <T!@uUMPX*%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllty**0+%F æM T&  <T!@ æM<+%FMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0MI-Activity/Operational Em>B3 ?ivOpn g<nal