ElfFile IDhFElfChnk?EDED?EDEDD =n WfK ? MF &0**?ED5Q@F T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@5Q@F ?EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**@ED>b`ڗF T&  <T!@>b`ڗF50P @EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**0AEDyF T&  <T!@yF50 AEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**BEDdiF T&  <T!@diF50 t BEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**CEDxF T&  <T!@xF50CEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0DED*fF T&  <T!@*fF50DEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllDD0**EEDlEF T&  <T!@lEF50\@ EEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0FEDPYF T&  <T!@PYF50X FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**GEDF T&  <T!@F50 GEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HED( F T&  <T!@( F50X HEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**IED^F T&  <T!@^F50 IEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0JED¾F T&  <T!@¾F50JEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KED-F T&  <T!@-F t KEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**LEDؽAF T&  <T!@>FTPEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll **0ED  F T&  <T!@  FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**EDt#F T&  <T!@t#FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ED F T&  <T!@ F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ED'F T&  <T!@'F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**ED/65F T&  <T!@/65FP EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**EDUF T&  <T!@UFP EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**0ED"iF T&  <T!@"iF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDF T&  <T!@F< EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**0EDߘF T&  <T!@ߘFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDkjF T&  <T!@kjFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ED*ZwF T&  <T!@*ZwFl EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0EDsϪF T&  <T!@sϪFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**EDaF T&  <T!@aFL EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**0ED?F T&  <T!@?FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ED$F T&  <T!@$F x EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**ED(F T&  <T!@(FDEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ED !F T&  <T!@ !FDEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ED]5F T&  <T!@]5FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDWʬF T&  <T!@WʬF8 XEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**0EDF T&  <T!@FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**ED1VF T&  <T!@1VF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ED4F T&  <T!@4F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0ED?氚F T&  <T!@?氚F`EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**EDeL.F T&  <T!@eL.F@EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ED;F T&  <T!@;F ,EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**0EDp|MF T&  <T!@p|MFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**ED+廮F T&  <T!@+廮FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**EDpZF T&  <T!@pZF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0EDoOF T&  <T!@oOF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDKF T&  <T!@KF h EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0ED}F T&  <T!@}FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDBW$!F T&  <T!@BW$!F( EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**EDXQF T&  <T!@XQF8,EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll **0ED9[eF T&  <T!@9[eF,EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**EDsF T&  <T!@sF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**EDK_F T&  <T!@K_F8EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**0EDnF T&  <T!@nF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDrDF T&  <T!@rDF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0ED&G˱F T&  <T!@&G˱FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDkB[F T&  <T!@kB[FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**0EDa~F T&  <T!@a~F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDIF T&  <T!@IF\EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**ED0F T&  <T!@0F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0ED?321F T&  <T!@?321Fl EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ED\ ʳF T&  <T!@\ ʳF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**EDXٳF T&  <T!@XٳF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT**0EDeegF T&  <T!@eegFl EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**EDCԂF T&  <T!@CԂF @ EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT**0EDӖF T&  <T!@ӖFlEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**ED6(F T&  <T!@6(FLl EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllT**0EDIF T&  <T!@IFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@F0 ?ED T&  <TJ{Microsoft-Windows-WMI-Activity/Operational 000BFt.dllvitOperational ElfChnkED(FDED(FDaXh6R=n WfK ? MF &0**ED9붵F T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@9붵F| EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**ED.uF T&  <T!@.uFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0EDE tF T&  <T!@E tFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**ED'ٖF T&  <T!@'ٖF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlle**EDgF T&  <T!@gFtEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0EDDIF T&  <T!@DIFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**ED4 NF T&  <T!@4 NF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0EDbF T&  <T!@bFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**EDF T&  <T!@FX|EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0EDkF T&  <T!@kFDEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**EDpF T&  <T!@pFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllm\**EDqF T&  <T!@qFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dll.ex**0EDTqF T&  <T!@TqFDEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllem320**EDRSF T&  <T!@RSF 8 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem\**EDD-F T&  <T!@D-F@` EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllem\**0ED[ǸF T&  <T!@[ǸFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltem30**EDN`F T&  <T!@N`F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllm**EDVnF T&  <T!@VnFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll.ex**0EDazF T&  <T!@azF:0DEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**EDhNF T&  <T!@hNF:0<EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0ED1kT-F T&  <T!@1kT-F:0DEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloot%0**ED>ҾF T&  <T!@>ҾF:0 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltem**0ED$F T&  <T!@$F:0 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloot%0**EDH1MF T&  <T!@H1MF:0EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllm32**ED~F T&  <T!@~F:0EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\**0ED*WF T&  <T!@*WF:0EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**EDP,F T&  <T!@P,F:0 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll%**EDs:F T&  <T!@s:F:0EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0EDEF T&  <T!@EF:0 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloot%0**EDF T&  <T!@F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0EDzF T&  <T!@zF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerfI0**ED?F T&  <T!@?Fl@EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllot%**0EDEVdF T&  <T!@EVdF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerfI0**EDhF T&  <T!@hF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllot%**EDRnSF T&  <T!@RnSF4 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllm32**0ED@4^F T&  <T!@@4^FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**ED¼F T&  <T!@¼F |EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllI**EDx:!F T&  <T!@x:!F( EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllot%**0ED#BF T&  <T!@#BFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerfI0**EDRͯF T&  <T!@RͯF,EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllot%**0EDÿF T&  <T!@ÿF\EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerfI0**ED^D^F T&  <T!@^D^F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0ED-vF T&  <T!@-vFT EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcfgw0**EDF T&  <T!@F90 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem\**EDpF T&  <T!@pF90 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll%\s**0EDv)F T&  <T!@v)F  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllndow0**ED=F T&  <T!@=F  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllr**EDxF T&  <T!@xF |EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**0EDGF T&  <T!@GF \EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllndow0**ED|F T&  <T!@|F  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlldow**0EDOF T&  <T!@OF \EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**ED1x&F T&  <T!@1x&F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlldow**0EDgAF T&  <T!@gAF \EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**ED͡F T&  <T!@͡F  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlldow**EDIdF T&  <T!@IdF | EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlldow**0EDF T&  <T!@F `EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**EDs_ӉF T&  <T!@s_ӉF  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllC**ED`?dF T&  <T!@`?dF | EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0EDF T&  <T!@F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsyst0**EDbdSFF T&  <T!@bdSFF TXEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dlldow**0EDWZF T&  <T!@WZF  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbem\0**EDDF T&  <T!@DF 4EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllSys**0ED1 F T&  <T!@1 F  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbem\0**EDp%F T&  <T!@g>%F hEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbem\0**EDF T&  <T!@F L EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllem\**0EDfF T&  <T!@fF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltem30**EDau_FF T&  <T!@au_FF | X EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllem\**EDFwF T&  <T!@FwF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllSys**0ED9F T&  <T!@9FEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbem\0**FDg"F T&  <T!@g"F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllm**FDwnp1F T&  <T!@wnp1F $FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.ex**0FD/>F T&  <T!@/>FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllstem0**FD~NF T&  <T!@~NF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.ex**0FD6QF T&  <T!@6QFFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllem320**FDיkF T&  <T!@יkF t FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem\**0FDF T&  <T!@F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldll0**FDF T&  <T!@FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem3**FD|BF T&  <T!@|BF$ FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllem\**0 FDN{VF T&  <T!@N{VF%0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltem30** FD?F T&  <T!@?F%0 < FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllm** FD%HF T&  <T!@%HF%0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0 FDL F T&  <T!@L F%0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloot%0** FD{F T&  <T!@{F  FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltem**0FDF T&  <T!@F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllv.dl0**FDF T&  <T!@>F@ !FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllot%**0"FD8uRF T&  <T!@8uRF"FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllv.dl0**#FDF T&  <T!@FHT#FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllll**0$FDkF T&  <T!@kF $FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllll0**%FD |F T&  <T!@ |F ,%FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllll**&FD8F T&  <T!@8F ,&FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllem3**0'FDaFD_F T&  <T!@_F\D>FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0?FDz^F T&  <T!@z^F?FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@FDaFF T&  <T!@aFF?0` @FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0AFDU/gF T&  <T!@U/gF?0|AFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**BFDGF T&  <T!@GF?04 BFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll**CFDq F T&  <T!@q F?04 CFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll**0DFDF T&  <T!@F?0DFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**EFDy~F T&  <T!@y~F?0 (EFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**FFDvF T&  <T!@vF?0T FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GFDR]F T&  <T!@R]F?0$GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HFDkF T&  <T!@kF?0 HFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0IFDpF T&  <T!@pF?0 IFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JFD 98F T&  <T!@ 98F JFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KFD~n2F T&  <T!@~n2F KFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**LFDF T&  <T!@F pLFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**MFDDF T&  <T!@DF pMFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0NFDV>F T&  <T!@V>F NFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**OFDh{F T&  <T!@h{F OFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**PFDarcF T&  <T!@arcF 8PFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0QFD{F T&  <T!@{FQFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RFDD6F T&  <T!@D6F@RFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0SFD JF T&  <T!@ JF SFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**TFDQF T&  <T!@QFT TFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**0UFD[F T&  <T!@[FUFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**VFDn"T?F T&  <T!@n"T?FUPdU VFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**WFDߓF T&  <T!@ߓFUPdU WFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0XFDрF T&  <T!@рFUPdU4XFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**YFDdz]F T&  <T!@dz]F YFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0ZFDJNcF T&  <T!@JNcF@ZFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**[FD'F T&  <T!@'FP [FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**0\FD!F T&  <T!@!F@\FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**]FD˰F T&  <T!@˰FT]FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0^FDF T&  <T!@F^FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**_FD-=F T&  <T!@-=Fl_FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**`FD_kgF T&  <T!@_kgFl`FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0aFDG{F T&  <T!@G{Ft aFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**bFDZJF T&  <T!@ZJF bFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**cFD(F T&  <T!@(FXcFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0dFD.F T&  <T!@.FdFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**eFDXF T&  <T!@XFeFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0fFD2aF T&  <T!@2aFtfFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**gFD~F T&  <T!@~F  gFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0hFD1F T&  <T!@1F  hFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**iFDF T&  <T!@F liFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll<**jFDR3F T&  <T!@R3F ljFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**0kFDlE GF T&  <T!@lE GF kFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**lFDl*F T&  <T!@l*F  lFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**mFDF T&  <T!@F mFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0nFDXF T&  <T!@XF D nFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**oFDCF T&  <T!@CF oFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0pFDF T&  <T!@F  pFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**qFD1{IF T&  <T!@1{IF < qFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**0rFD*aF T&  <T!@*aF  rFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**sFDU@F T&  <T!@U@F $ sFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll<**0tFD KF T&  <T!@ KF  tFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**uFDF T&  <T!@F uFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**vFDV-F T&  <T!@V-FvFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0wFD&F T&  <T!@&F@wFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**xFDϣcF T&  <T!@ϣcF xFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0yFDwF T&  <T!@wF yFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**zFD"~ F T&  <T!@"~ F 0 zFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0{FD6*F T&  <T!@6*F 0{FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**|FDF T&  <T!@F 0 |FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**}FD~-F T&  <T!@~-F 0 }FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0~FD{F T&  <T!@{F 0H~FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDizF T&  <T!@izF 0 p FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**FDF T&  <T!@F 0l LFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDSF T&  <T!@SF 0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FD_{%/F T&  <T!@_{%/F 0lFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll<**0FDCF T&  <T!@CF 0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDF T&  <T!@F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDF T&  <T!@Fh FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FD pF T&  <T!@ pF$FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll<**FD)F T&  <T!@)F$FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDǨF T&  <T!@ǨF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDB=F T&  <T!@B=F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**FDLF T&  <T!@LF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0FDV[F T&  <T!@V[FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDdF T&  <T!@dF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDhF T&  <T!@hFFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDnF T&  <T!@nF`FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDA4F T&  <T!@A4FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDM;F T&  <T!@M;F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**FD/kiF T&  <T!@/kiFFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0FDtF T&  <T!@tFFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FD|F T&  <T!@|F | FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**FD3 F T&  <T!@3 F  FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDH&F T&  <T!@H&FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FD٠F T&  <T!@٠FTFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll<**0FD^F T&  <T!@^FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDoF T&  <T!@oFFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0FD{xF T&  <T!@{xF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FDqF T&  <T!@qF4 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll<**FD%J+F T&  <T!@%J+F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0FDSF?F T&  <T!@SF?FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**FD-F T&  <T!@-F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllT T&  <TActivity/Operational 000BFt.dllvitOperational ElfChnkFDGDFDGD /7Qy=Gxfx$yWfxK ? yMF xxiw&0**FD I%F T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@ I%F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0FDF T&  <T!@FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**FDߐF T&  <T!@ߐF0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0FDzF T&  <T!@zF0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FDo)7F T&  <T!@o)7F xFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0FDWF T&  <T!@WF(FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FD`F T&  <T!@`FT0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**FD(F T&  <T!@(FTFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllED**0FDf F T&  <T!@f FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FDnF T&  <T!@nF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**FDeF T&  <T!@eF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0FDXF T&  <T!@XF8FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FD)w*\F T&  <T!@)w*\Fd FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllRS**0FD&pF T&  <T!@&pFFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FDF T&  <T!@F0tFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0FD*"F T&  <T!@*"FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FDiF T&  <T!@iF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**FD;F T&  <T!@;F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0FDwF T&  <T!@wF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FDqqqF T&  <T!@qqqF FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**FD6F T&  <T!@6F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDF T&  <T!@Fp FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDf^'F T&  <T!@f^'Ft FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDh;F T&  <T!@h;F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDaF T&  <T!@aFL FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FD=9F T&  <T!@=9FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDZF T&  <T!@ZF0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**FDF T&  <T!@F0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDZ F T&  <T!@Z F0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll0**FD,65F T&  <T!@,65F0 $ FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**FD- CF T&  <T!@- CF0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDËSF T&  <T!@ËSF0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDF T&  <T!@F0@FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDrG T&  <T!@rG0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDG T&  <T!@G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDiG T&  <T!@iG FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDT%G T&  <T!@T%G  FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**FDLJXG T&  <T!@LJXGtFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FD(IlG T&  <T!@(IlG FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll0**FDG T&  <T!@G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**FDtȯG T&  <T!@tȯG FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDcG T&  <T!@cGFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDKG T&  <T!@KGDFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FDG T&  <T!@GL FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**FDI1-bG T&  <T!@I1-bGPFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllsys**0FD G T&  <T!@ Gx FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll0**FDuG T&  <T!@uG FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**FDr#G T&  <T!@r#G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0FDVb7G T&  <T!@Vb7G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FDG T&  <T!@G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**FD{G T&  <T!@{GlFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0FD:`G T&  <T!@:`G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**HFDPFG T&  <T!@PFGS@=Fa=FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwEm>B3 ?+Awn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMIGx[Id .fx3 ClientMachine x_User 2x?ClientProcessId &x} Component &$ywg Operation (QyJ ResultCode .yxb PossibleCause N({DEA24053-463D-0001-61BC-A2DE3D46DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '0'2UnknownoH**FDFG T&  <T!@FGS@=Fa=FFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN({DEA24053-463D-0000-5E53-A2DE3D46DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '204'2Unknowny**FDdž#G T&  <T!@dž#GS@=Fa=Fl FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0FDN.G T&  <T!@N.GS@=Fa=F FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsyst0**FD6,G T&  <T!@6,G0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0FDOG T&  <T!@OG0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**FD3G T&  <T!@3G0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**FDu^G T&  <T!@u^G0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**FDҊu G T&  <T!@Ҋu GP<FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllll**FD0d G T&  <T!@0d GbCSA4xV_FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllt.**FD( G T&  <T!@( GbCSA4xV_FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dlltemR**FDO G T&  <T!@O Gb8Gy8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{321AFD63-9B2F-4C3C-A1E6-41123C8908DA}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**FDO G T&  <T!@O Gb8Gy8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{913B5E9B-F0B4-4C65-8419-9F774E7D0297}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**FDO G T&  <T!@O Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{4D46FF66-F799-4EFB-8992-2FB90CE1591B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown=z**FDr) G T&  <T!@r) Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{B87FA4E5-239A-4CB1-A1D8-919995FBF9A2}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowniv**FDr) G T&  <T!@r) Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{3748FCD8-77BD-4D0F-863F-F96233132207}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownse**0FD;, G T&  <T!@;, Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllndow0**FD;, G T&  <T!@;, Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{5F634F2C-7989-4317-B4B4-0D3DFD242D74}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownT**FD+5 G T&  <T!@+5 Gb8G8GLFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iwN{683261CA-E98B-44B8-AA94-804A14E1CF93}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownOp**FD4G T&  <T!@4Gb8G8G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dllp**FDG T&  <T!@Gb8G8G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt** FD?/G T&  <T!@?/Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllows **FDpG T&  <T!@pGb8G8G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**0FD0G T&  <T!@0Gb8G8GFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**FD$G T&  <T!@$Gb8G8G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllows**FDSG T&  <T!@SGx x FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllows**0FDʦgG T&  <T!@ʦgGFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**FDBG T&  <T!@BGP<| FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllows**0FD G T&  <T!@ GP<FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlly/Op0**FD G T&  <T!@ GP<  FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**FDZ G T&  <T!@Z GP<$D FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dlloft**FD i{ G T&  <T!@ i{ GP<$D FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dlloft**0FD%0 G T&  <T!@%0 GP<0 FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**FDa G T&  <T!@a GP<<FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0FD,V G T&  <T!@,V GP<0FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Act0**FDݥ G T&  <T!@ݥ GP<FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**FD{# G T&  <T!@{# GP<FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloft**0FDV~)3 G T&  <T!@V~)3 GP< FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Act0**FDt. G T&  <T!@t. G 0 8FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dlloft**0FD G T&  <T!@ G p FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Act0**FD S G T&  <T!@ S G H FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**FDa G T&  <T!@a G @FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**FDX,Ʉ G T&  <T!@X,Ʉ G @FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0FDȘ G T&  <T!@Ș G tFDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**FDBk- G T&  <T!@Bk- G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0FD6BK G T&  <T!@6BK G FDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**GD@ G T&  <T!@@ G GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**GDg G T&  <T!@g G GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{M**0GD f G T&  <T!@ f G \GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**GDBhG T&  <T!@BhG dGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll{M**0GDWi9G T&  <T!@Wi9G \GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**GD%c"G T&  <T!@%c"G GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**GD!0G T&  <T!@!0G GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllows**GDOG T&  <T!@OG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll{M**0GD= dG T&  <T!@= dG tGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0** GD*G T&  <T!@*GP<  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllows**0 GD UG T&  <T!@ UGP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0** GDhG T&  <T!@hGP<( GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllows** GD*G T&  <T!@*GP<(P GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllows**0 GDjG T&  <T!@jGP<$ GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlldows0**GDd.^G T&  <T!@d.^GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllowsMI-Activity/Operational 000nal ElfChnkGDGDGDGDhxHdv=n WfK ? MF &0**GDxx|G T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@xx|GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**GDfG T&  <T!@fGP< t GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**GD G T&  <T!@ GP<xGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**GDHG T&  <T!@HGP<xGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0GD3':8G T&  <T!@3':8GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**GD<G T&  <T!@<GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0GD'G T&  <T!@'GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**GD&APG T&  <T!@&APG 0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**GDG T&  <T!@G 0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0GD @G T&  <T!@ @G 0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllls0**GD9:)G T&  <T!@9:)GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0GDGG T&  <T!@GGP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GD{G T&  <T!@{GP< < GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**GD OG T&  <T!@ OGP<( 8GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllsys**GDٲG T&  <T!@ٲGP<( 8GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0GDɈG T&  <T!@ɈGP<| GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**GD0OG T&  <T!@0OGP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0 GD[G T&  <T!@[GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**!GDīG T&  <T!@īGP<!GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**"GDҲ#LG T&  <T!@Ҳ#LGP<< 8 "GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllwbe**0#GD,`G T&  <T!@,`GP<#GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsys0**$GDZPG T&  <T!@ZPGP<8 $GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0%GDiG T&  <T!@iGP<H%GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsys0**&GDG T&  <T!@GP< &GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**'GDYy8G T&  <T!@Yy8GP< 'GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**(GD'αG T&  <T!@'αGP< (GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0)GDG T&  <T!@GP<H)GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0***GDlVG T&  <T!@lVG 4 *GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0+GD=xG T&  <T!@=xG+GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**,GDpG T&  <T!@pG X,GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllwbe**-GD'cG T&  <T!@'cG X-GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0.GDk+G T&  <T!@k+G.GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**/GD''G T&  <T!@''G /GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**00GD<G T&  <T!@<G0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**1GDiNG T&  <T!@iNG 1GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**2GD4{]G T&  <T!@4{]GD 2GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**3GD}G T&  <T!@}GD 3GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**04GDmx G T&  <T!@mx G 4GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**5GDl+G T&  <T!@l+G , 5GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**06GDICG T&  <T!@ICGH6GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\wbe0**7GD47G T&  <T!@47G7GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**8GDĩG T&  <T!@ĩG8GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**09GDG T&  <T!@G9GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**:GDvG T&  <T!@vGt :GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllemR**0;GD}G T&  <T!@}G;GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**GD"EHG T&  <T!@"EHGl>GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0?GD PN\G T&  <T!@ PN\G<?GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle0**@GDG T&  <T!@GP 0@GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllmro**0AGDncG T&  <T!@ncGAGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**BGD|VG T&  <T!@|VG"0|  BGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllemR**CGDG T&  <T!@G"0 CGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll3**0DGDuG T&  <T!@uG"0 DGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC-A0**EGD#SG T&  <T!@#SG"0 EGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0FGD!}G T&  <T!@!}G"0 FGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2Un0**GGDG T&  <T!@G"0 GGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**HGDG T&  <T!@G"0lHGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0IGD' G T&  <T!@' G"0IGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**JGDR G T&  <T!@R G P<< `JGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllemR**0KGDb G T&  <T!@b G P<KGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**LGDJ!G T&  <T!@J!G P<0D LGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllmiP**MGD-)y!G T&  <T!@-)y!G P<tH MGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllmwi**0NGD=/!G T&  <T!@=/!G P<x NGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllFD0**OGD6"G T&  <T!@6"G P<p| OGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll**0PGDأ?"G T&  <T!@أ?"G P<$ PGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll- RO0**QGDخ"G T&  <T!@خ"G P< \ QGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**RGDU\"G T&  <T!@U\"G P< RGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllGb**SGDʰ"G T&  <T!@ʰ"G P< SGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllare**0TGD0"G T&  <T!@0"G P< TGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllAPP-0**UGDE#G T&  <T!@E#G P<` UGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dllcro**0VGD堥#G T&  <T!@堥#G P<VGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**WGD $G T&  <T!@ $G P< WGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**XGD\fD$G T&  <T!@\fD$G P<l XGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllod **0YGDrqX$G T&  <T!@rqX$G P<YGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll{6830**ZGDhU$G T&  <T!@hU$GZGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0[GDZQ@ %G T&  <T!@ZQ@ %G[GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**\GDͳy%G T&  <T!@ͳy%G P\GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllo**]GDZ |%G T&  <T!@Z |%G8< ]GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dlloso**^GDM%G T&  <T!@M%G8< ^GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dlloso**0_GDz%G T&  <T!@z%G _GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**`GDyO&G T&  <T!@yO&GD p `GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dlloso**0aGDp&G T&  <T!@p&GxaGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**bGD &G T&  <T!@ &G| TbGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dlloso**cGD&'G T&  <T!@&'GL cGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0dGD*#'G T&  <T!@*#'G\dGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**eGD2 'G T&  <T!@2 'GPeGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllndo**0fGD&'G T&  <T!@&'GtfGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllity0**gGDM(G T&  <T!@M(G gGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllA**hGDݿZ(G T&  <T!@ݿZ(GhGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**iGDvq^u(G T&  <T!@vq^u(GiGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0jGDS(G T&  <T!@S(GjGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**kGDy)G T&  <T!@y)G P<4 kGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dlloso**0lGD{t%<)G T&  <T!@{t%<)G P< lGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**mGD`{ë)G T&  <T!@`{ë)G0H mGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dlloso**nGD:)G T&  <T!@:)G0H nGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dlloso**0oGD)G T&  <T!@)G0\oGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**pGD*G T&  <T!@*G0 `pGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0qGD¡*G T&  <T!@¡*G0qGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllity0**rGD &+G T&  <T!@ &+G0 rGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllA**sGDL!+G T&  <T!@L!+G0sGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**tGDo@+G T&  <T!@o@+G0tGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0uGD#T+G T&  <T!@#T+G0 uGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**vGDK5+G T&  <T!@K5+G08 vGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0wGDb,G T&  <T!@b,G0HwGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**xGDvu,G T&  <T!@vu,G0L xGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dlloso**yGD /,G T&  <T!@ /,G0 <yGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0zGDΡ3,G T&  <T!@Ρ3,G0 zGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**{GD.YQ-G T&  <T!@.YQ-GP<t {GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllndo**0|GDm-G T&  <T!@m-GP<d|GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllity0**}GD}J-G T&  <T!@}J-GP< 8}GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllA**~GD#-G T&  <T!@#-GP< ~GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**GD2 .G T&  <T!@2 .GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0GDi.G T&  <T!@i.GP<0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**GD?.G T&  <T!@?.GP<8GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0GD7.G T&  <T!@7.GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**GD%WW@/G T&  <T!@%WW@/G0(GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dlloso-Windows-WMI T&  <Tvi@kq/G0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000R000nal ElfChnkGDGDGDGDۃXR=n WfK ? MF &0**GDkq/G T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@kq/G0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0GDU(t/G T&  <T!@U(t/G0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllGD0**GD10G T&  <T!@10G0\GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllGD**0GDC80G T&  <T!@C80G0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GD?0G T&  <T!@?0G0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**GDһ0G T&  <T!@һ0G0pGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**GD{Z0G T&  <T!@{Z0G0pGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0GD*r0G T&  <T!@*r0G0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllst.0**GDqZ'z1G T&  <T!@qZ'z1G0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0GD1G T&  <T!@1GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllls0**GDĶ 2G T&  <T!@Ķ 2GP<PGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****GD}<2G T&  <T!@}<2GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0GDLP2G T&  <T!@LP2GP<|GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllGD0**GDk62G T&  <T!@k62GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllGD**GD"3G T&  <T!@"3GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**0GD+3G T&  <T!@+3GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**GDL:3G T&  <T!@L:3GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**GDڅe4G T&  <T!@څe4GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0GDʒ4G T&  <T!@ʒ4GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsys0**GDWg"5G T&  <T!@Wg"5GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllwbe**0GDWc65G T&  <T!@Wc65GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsys0**GD5G T&  <T!@5G10 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**GDm5G T&  <T!@m5GE GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0GDD45G T&  <T!@D45GE  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll'GD0**GDA6G T&  <T!@A6GE <GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**GDz9O6G T&  <T!@z9O6GE GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**GDJ6G T&  <T!@J6GE  0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0GD6G T&  <T!@6GE  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\w0**GDfa7G T&  <T!@fa7GE (4GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll\ts**GDG T&  <T!@k4>GP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllR**GDMe>G T&  <T!@Me>GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**GDNu@>G T&  <T!@Nu@>GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GDJ>G T&  <T!@J>GP<PGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDN>G T&  <T!@N>GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0GDg>G T&  <T!@g>GP<lGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlltemR0**GDh}w?G T&  <T!@h}w?GP<X GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**GDِ?G T&  <T!@ِ?GP<X GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GD.?G T&  <T!@.?GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsyst0**GDL@G T&  <T!@L@GP<88 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll2\w**GDgO@G T&  <T!@gO@GP<@GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0GD7hc@G T&  <T!@7hc@GP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**GD+F@G T&  <T!@+F@GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlly**GD2@G T&  <T!@2@GP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**GD`-AG T&  <T!@`-AGP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**0GDJ6AG T&  <T!@J6AGP<GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GD^AG T&  <T!@^AGP<\xGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GDAG T&  <T!@AGP< GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDTCBG T&  <T!@TCBG$0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**GDmgBG T&  <T!@mgBG  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll %**0GD{BG T&  <T!@{BG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GD^3BG T&  <T!@^3BG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**GDkơCG T&  <T!@kơCG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GD .CG T&  <T!@ .CG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GDECG T&  <T!@ECG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**GDCG T&  <T!@CG \GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllexe**0GDQxCG T&  <T!@QxCG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDMDG T&  <T!@MDG  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GD#HDG T&  <T!@#HDG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GD$PEG T&  <T!@$PEG  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**GD{)!3EG T&  <T!@{)!3EG  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll %**0GDs}GEG T&  <T!@s}GEG 0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GD-EG T&  <T!@-EG PGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**GDZ^EG T&  <T!@Z^EG @GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0GDáEG T&  <T!@áEG DGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GDjnvFG T&  <T!@jnvFG GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**GD(FG T&  <T!@(FG ( GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**0GDUFG T&  <T!@UFGPGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDcKGG T&  <T!@cKGGPlHGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GD_GG T&  <T!@_GGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDn6GG T&  <T!@n6GGP  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**GD\GG T&  <T!@\GGP  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll %**0GD[HG T&  <T!@[HGP| GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GD>iHG T&  <T!@>iHGP( GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll2\w**GD 94HG T&  <T!@ 94HGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0GD)HG T&  <T!@)HGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GD\@IG T&  <T!@\@IGP tGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**GDqNIG T&  <T!@qNIGPdGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**0GD*wIG T&  <T!@*wIG?0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDyJG T&  <T!@yJG?0d  GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GDN*JG T&  <T!@N*JG?0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**GDNJG T&  <T!@NJG?0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**GD"JG T&  <T!@"JG?0 GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll %**0GDVJG T&  <T!@VJGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GD|)6KG T&  <T!@|)6KGP hGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**GDEm|KG T&  <T!@Em|KGP lGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0GDiKG T&  <T!@iKGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**GD_ LG T&  <T!@_ LGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**GD ALG T&  <T!@ ALGP L GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexeC:\Windows\ T&  <Ts-@ht;CLGP0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFindows-WMI-Activity/Operational 000R000nal ElfChnkGDmHDGDmHD00ffB=n WfK ? MF &0**GDht;CLG T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@ht;CLGP0GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**GD2_LG T&  <T!@2_LGPGDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllGD**0GD LG T&  <T!@ LGP GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**GDy)rMG T&  <T!@y)rMGPd GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll**GDhҔMG T&  <T!@hҔMGPd GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllGD**0GDۨMG T&  <T!@ۨMGP| GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**GDTNG T&  <T!@TNGP (GDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**HD`{GNG T&  <T!@`{GNGPxHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllGD**0HD[NG T&  <T!@[NGP\ HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDJfNG T&  <T!@JfNGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**HDSNG T&  <T!@SNGPD 4 HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll****0HD!|OG T&  <T!@!|OGL HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**HDHJOG T&  <T!@HJOGL HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllGD**0HDKOG T&  <T!@KOGLHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**HD9PG T&  <T!@9PGL D HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**HD@a`PG T&  <T!@@a`PGL D HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllGD**0 HDxtPG T&  <T!@xtPGLl HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** HDdPG T&  <T!@dPGLl  HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll** HD9QG T&  <T!@9QGL \ HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllGD**0 HD&QG T&  <T!@&QGLl HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** HD0\HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**HD!t+SG T&  <T!@!t+SG>0\HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0HD^?SG T&  <T!@^?SGkvP|HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDSG T&  <T!@SGkvP| , HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll**HD!(SG T&  <T!@!(SGkvPlHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HD-SG T&  <T!@-SGkvP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD|nTG T&  <T!@|nTGkvP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HDq|TG T&  <T!@q|TGkvP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HDTG T&  <T!@TGkvPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**HDCUG T&  <T!@CUGkvPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HD>XWUG T&  <T!@>XWUGkvPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD.`UG T&  <T!@.`UGkvP 0HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**HDUG T&  <T!@UGkvP 0HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0HD VG T&  <T!@ VGkvP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** HDBdVG T&  <T!@BdVGkvP` , HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll**!HDHgVG T&  <T!@HgVGkvP!HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0"HDnVG T&  <T!@nVGkvP"HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**#HDG=WG T&  <T!@G=WGkvP |#HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**$HDWKWG T&  <T!@WKWGkvP $HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0%HDß>pWG T&  <T!@ß>pWGkvP%HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&HDXG T&  <T!@XGP&HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0'HD[#XG T&  <T!@[#XGP$ 'HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(HDI=XG T&  <T!@I=XGP\ X(HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll**0)HDkXG T&  <T!@kXGP\ )HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0***HDigtYG T&  <T!@igtYGP*HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0+HDAYG T&  <T!@AYGP\ +HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**,HD; ZG T&  <T!@; ZGP P ,HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**-HDZG T&  <T!@ZGP -HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0.HD'~;ZG T&  <T!@'~;ZGP.HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**/HDROZG T&  <T!@ROZGP/HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**00HD?OZG T&  <T!@?OZGP0HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**1HDGu[G T&  <T!@Gu[GP1HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **02HD;&[G T&  <T!@;&[GP2HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**3HD?\G T&  <T!@?\GP03HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllT**04HDS\G T&  <T!@S\GP84HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@>G0**5HD !\G T&  <T!@ !\GP 5HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**6HD陗\G T&  <T!@陗\GP 6HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **07HDӿ]G T&  <T!@ӿ]GP 7HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**8HDk]G T&  <T!@k]GP 8HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **09HDď]G T&  <T!@ď]GP9HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**:HD;^G T&  <T!@;^GP :HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0;HDQ`l^G T&  <T!@Q`l^GP;HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD^G T&  <T!@^GP>HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**?HD| _G T&  <T!@| _GP ?HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll!**0@HD$1_G T&  <T!@$1_GP@HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllP0**AHD`m_G T&  <T!@`m_GP AHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**BHD(ٴ_G T&  <T!@(ٴ_GP|8BHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll<**0CHDD_G T&  <T!@D_GP CHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@0**DHDNv`G T&  <T!@Nv`GP\ DHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll<**0EHDτ`G T&  <T!@τ`GPh EHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@m0**FHD軛#aG T&  <T!@軛#aGP FHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0GHD9aG T&  <T!@9aGPTGHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@^30**0HHD?aG T&  <T!@?aGP<HHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll G0**IHDaG T&  <T!@aGP IHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JHDopTbG T&  <T!@opTbGP JHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll!**KHDYjkbG T&  <T!@YjkbGPH@KHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll@**0LHD}AbG T&  <T!@}AbG(0t LHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**MHD=@cG T&  <T!@=@cG(0 MHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0NHDPcG T&  <T!@PcG(0NHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**OHDcG T&  <T!@cG(0 OHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@$**PHD4cG T&  <T!@4cG(0 PHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@{)**0QHDdG T&  <T!@dG(0 QHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0G0**RHD2wkSdG T&  <T!@2wkSdGP RHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@-**SHD&AdG T&  <T!@&AdGPSHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@Z^**0THDdG T&  <T!@dGP0THDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllDG0**UHD 0NeG T&  <T!@ 0NeGP T UHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@jn**0VHD&heG T&  <T!@&heGP` VHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**WHDtfG T&  <T!@tfGPP WHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**0XHDFPfG T&  <T!@FPfGP$ XHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**YHDz=fG T&  <T!@z=fGP YHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllG**ZHDڊfG T&  <T!@ڊfGP 4ZHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@n6**0[HD 4fG T&  <T!@ 4fGP[HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll G0**\HDc"ugG T&  <T!@c"ugGPd ( \HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll G**0]HD5gG T&  <T!@5gGP]HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**^HD|hG T&  <T!@|hGP \ ^HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll G**0_HDZ3hG T&  <T!@Z3hGP _HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**`HDJhG T&  <T!@JhG P |`HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG**0aHDrړhG T&  <T!@rړhG P0aHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**bHDuJAfiG T&  <T!@uJAfiG P bHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllo**cHDsiG T&  <T!@siG P cHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll G**0dHD@diG T&  <T!@@diG PdHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**eHD9jG T&  <T!@9jG P, eHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllG**0fHDX4LjG T&  <T!@X4LjG PfHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**gHDHF0jG T&  <T!@HF0jG P \gHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0hHDjG T&  <T!@jG P hHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**iHDkG T&  <T!@kG P iHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0jHDԱkG T&  <T!@ԱkG P jHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMI-A0**(kHD kG T&  <T!@ kG P kHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000,TServerFeatureProviderwmiprvse.exe%windir%\system32\wbem\servercompprov.dllws-W(**HlHDLkG T&  <T!@LkG Pl lHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exel %systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllsH**mHD5lG T&  <T!@5lGL%IثGP mHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlltindows-WMI-A T&  <TWMI-Activity/Operational 000R000nal ElfChnknHDHDnHDHDBwEbe=n WfK ? MF &0**nHD'ClG T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@'ClGL%IثGP0 nHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**0oHDdlG T&  <T!@dlGL%IثGPLoHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllGD0**pHDmG T&  <T!@mG pHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0qHDitmG T&  <T!@itmG qHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**rHDmG T&  <T!@mGL drHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllGD**0sHDDmG T&  <T!@DmG\ sHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**tHD&inG T&  <T!@&inG tHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0uHD}nG T&  <T!@}nGuHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**vHD1oG T&  <T!@1oG |vHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**wHDq)oG T&  <T!@q)oGh wHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dlls**0xHD/oG T&  <T!@/oG0xHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**yHD oG T&  <T!@ oGP yHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**0zHD(oG T&  <T!@(oG zHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**{HDȌ.kpG T&  <T!@Ȍ.kpGP {HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**0|HDfhpG T&  <T!@fhpG4 |HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**}HDZ4qG T&  <T!@Z4qGP  }HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0~HDG_HqG T&  <T!@G_HqGPX~HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**HD>qG T&  <T!@>qGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HD@qG T&  <T!@@qGP<HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll HD**0HD"&qG T&  <T!@"&qGPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll HD0**HD/rG T&  <T!@/rGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HDrG T&  <T!@rGP@HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDW~2sG T&  <T!@W~2sGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HD`sG T&  <T!@`sGPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD tG T&  <T!@ tG(0\HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HDtG T&  <T!@tG(04HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD׆tG T&  <T!@׆tG(0 @HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HD6ctG T&  <T!@6ctG(0< HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllHD**0HDktG T&  <T!@ktG(0 HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD)huG T&  <T!@)huG HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0HD<8yuG T&  <T!@<8yuG HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDuG T&  <T!@uG( HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HD$.vG T&  <T!@$.vGLHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**HD:gvG T&  <T!@:gvG tHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0HDvG T&  <T!@vGHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**HDyKawG T&  <T!@yKawG HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HDjnwG T&  <T!@jnwGHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0HD+ǩwG T&  <T!@+ǩwGPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDƻF1xG T&  <T!@ƻF1xG4 HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll**0HD> xDxG T&  <T!@> xDxGL HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDxG T&  <T!@xG;0| HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll**0HDfHxG T&  <T!@fHxG;0L HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDdyG T&  <T!@dyG;08 HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll **0HDOyG T&  <T!@OyG%T HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD`.zG T&  <T!@`.zG% HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HDiG T&  <T!@>iGPP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll**0HDG T&  <T!@GP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD&NG T&  <T!@&NGP8 HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**HDG T&  <T!@GP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0HD&^G T&  <T!@&^GPP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDF&G T&  <T!@F&GP LHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HD#x4G T&  <T!@#x4GP lHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0HD2UG T&  <T!@2UGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD6G T&  <T!@6GP dHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0HDmG T&  <T!@mGP<HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HD0UjG T&  <T!@0UjGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**HD`ȯG T&  <T!@`ȯGP HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0HDnкG T&  <T!@nкGPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**HDT,G T&  <T!@T,GPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**HDZG T&  <T!@ZGPxlHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll****0HDmG T&  <T!@mGPHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**HDs%G T&  <T!@s%G HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**HD6'G T&  <T!@6'G48HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll****0HDo G T&  <T!@o GHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**HD~G T&  <T!@~G| HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll****0HDEa?ӋG T&  <T!@Ea?ӋGHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**HDATG T&  <T!@ATG <HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****HDHOrG T&  <T!@HOrG <HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0HD*G T&  <T!@*GHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**HD0vG T&  <T!@0vG HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllv.d**HD (G T&  <T!@ (GD dHDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllSer**0HDC8G T&  <T!@C8G HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllm\wm0rov.dllt T&  <T <TWMI-Activity/Operational 000R000nal ElfChnkHDWIDHDWID(8Dw (=n WfK ? MF &0**xHD$1G T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TM!@$1G <HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllx**HDY8ƍG T&  <T!@Y8ƍG HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0HD'G T&  <T!@'G HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**HDG̊G T&  <T!@G̊G$ HDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllsys**0HDIDG T&  <T!@GP \>IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**?ID)zC!G T&  <T!@)zC!GPx?IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0@IDԷEG T&  <T!@ԷEGP @IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**AID$G T&  <T!@$GP AIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**0BIDG T&  <T!@GPBIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**CID\7-wG T&  <T!@\7-wGP| CIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll 00**DIDKG T&  <T!@KGP| DIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll 00**0EIDWG T&  <T!@WGPEIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**FIDGMGG T&  <T!@GMGGP FIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**GID`-JG T&  <T!@`-JGP GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0HIDX'^G T&  <T!@X'^GPHIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**IID7Ѓ֦G T&  <T!@7Ѓ֦G0 IIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**JIDLG T&  <T!@LG0JIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**KIDC{!G T&  <T!@C{!G0KIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0LIDRG T&  <T!@RG0LIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**MIDѯG T&  <T!@ѯG0P MIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0NIDçG T&  <T!@çG0 NIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**OIDǨGG T&  <T!@ǨGG OIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**PID!kG T&  <T!@!kG PIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0QID~vG T&  <T!@~vG QIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**RIDtG T&  <T!@tG (RIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0SIDXh)G T&  <T!@Xh)G ( SIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**TIDB(権G T&  <T!@B(権G  d TIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**UIDdG T&  <T!@dG xUIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0VID8ܩG T&  <T!@8ܩG  VIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**WIDA {G T&  <T!@A {G  WIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllratnal 000B T&  <Twm@G XIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFity/Operational 000R000nal ElfChnkXIDIDXIDID ff=n WfK ? MF &0**XIDG T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@G XIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**YIDG T&  <T!@G  YIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**ZID.G T&  <T!@.G  ZIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllHD**0[ID^_AG T&  <T!@^_AG [IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**\ID䢫G T&  <T!@䢫G l \IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllHD**]IDG T&  <T!@G  ]IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllHD**0^ID:G T&  <T!@:G T^IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**_IDi5vG T&  <T!@i5vG  _IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**`IDjܲG T&  <T!@jܲG x`IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllwbe**0aID8}G T&  <T!@8}GaIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**bIDUFG T&  <T!@UFG bIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0cIDIZG T&  <T!@IZGh cIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**dIDqQխG T&  <T!@qQխGd ( dIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**eIDCJ5G T&  <T!@CJ5Gd ( eIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dllHD**0fID; G T&  <T!@; GfIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**gIDwgG T&  <T!@wgG gIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllHD**hID3G T&  <T!@3GhIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllHD**0iID$꿮G T&  <T!@$꿮GiIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**jIDAEG T&  <T!@AEG jIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**kIDQlSG T&  <T!@QlSG@kIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllemR**0lIDغrG T&  <T!@غrG,lIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**mIDG T&  <T!@G | mIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllHD**0nIDɊ%G T&  <T!@Ɋ%GnIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**oIDgG T&  <T!@gGh oIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllHD**0pIDZذG T&  <T!@ZذGpIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**qID G T&  <T!@ G qIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllHD**0rID)]*G T&  <T!@)]*G8rIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**sIDG T&  <T!@G sIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**tIDS}*G T&  <T!@S}*GX tIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllemR**uIDD*G T&  <T!@D*GX uIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0vIDX8=G T&  <T!@X8=G8vIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**wIDLܲG T&  <T!@LܲG (wIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**0xID:PG T&  <T!@:PGxIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**yIDFvG T&  <T!@FvG8 yIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**0zIDhG T&  <T!@hG zIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**{IDf=3G T&  <T!@f=3GP< {IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**|IDTv@G T&  <T!@Tv@GP< |IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0}IDςXG T&  <T!@ςXGP<4 }IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**~IDi~G T&  <T!@i~GP<l ~IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**0ID)< G T&  <T!@)< GPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDԩG T&  <T!@ԩG0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0ID G T&  <T!@ G0IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID)6G T&  <T!@)6G0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ID^ZG T&  <T!@^ZG0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0IDɊnG T&  <T!@ɊnG0IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID 8ƶG T&  <T!@ 8ƶG0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ID' G T&  <T!@' G0@IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**0IDT!G T&  <T!@T!G0IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID*G T&  <T!@*G0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**ID"#G T&  <T!@"#G0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ID(~ԷG T&  <T!@(~ԷG0IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDPsG T&  <T!@PsG0 dIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0IDMG T&  <T!@MG0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDKmG T&  <T!@KmG0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**ID5)G T&  <T!@5)G0< IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ID:G T&  <T!@:GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDG T&  <T!@GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**IDعG T&  <T!@عGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0IDHwG T&  <T!@HwGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID yG T&  <T!@ yGPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0IDx+G T&  <T!@x+GPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDS>G T&  <T!@S>GP(  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll**0IDFCRG T&  <T!@FCRGPlIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**IDF̻G T&  <T!@F̻GP`H IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**IDG T&  <T!@GP0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0ID}E_G T&  <T!@}E_GPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**ID&[G T&  <T!@&[GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**ID 'G T&  <T!@ 'GP4,IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll **0IDr/G T&  <T!@r/GPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID, =G T&  <T!@, =GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**IDOaVG T&  <T!@OaVGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0ID kG T&  <T!@ kGPP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDg G T&  <T!@g GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0IDG T&  <T!@GPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDїG T&  <T!@їGP4 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**IDǿžG T&  <T!@ǿžGP( IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll **0IDоG T&  <T!@оGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDfw'G T&  <T!@fw'GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**IDMWqoG T&  <T!@MWqoGPh4IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll **0IDoG T&  <T!@oGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMG70**IDG T&  <T!@GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG7**ID MH"G T&  <T!@ MH"GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG7**0ID/ A6G T&  <T!@/ A6GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG70**IDqG T&  <T!@qGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG7**0IDG T&  <T!@GP8 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG70**IDGUhG T&  <T!@GUhGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG7**0IDyG T&  <T!@yGkvP8 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID^rG T&  <T!@^rGkvP H IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG7**IDH:G T&  <T!@H:GkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG7**0ID{NG T&  <T!@{NGkvPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDpG T&  <T!@pGkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**IDG T&  <T!@GkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG**IDG T&  <T!@GkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG**0IDpG T&  <T!@pGkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**ID3IG T&  <T!@3IGkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG**0IDPG T&  <T!@PGkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwG0**ID"U.G T&  <T!@"U.GkvPPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**IDSG T&  <T!@SGkvPPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**0IDJ,gG T&  <T!@J,gGkvP, IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**ID#VG T&  <T!@#VGkvP< IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**ID7G T&  <T!@7GkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllG**0IDfG T&  <T!@fGkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll֦G0**ID5'G T&  <T!@5'GkvP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**IDYG T&  <T!@YGkvPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**IDeG T&  <T!@eGkvPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**0IDG T&  <T!@G  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**IDI"G T&  <T!@I"G IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllG**IDkG T&  <T!@kG IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**0IDG T&  <T!@G IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllkG 0**IDG T&  <T!@G < IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllG **IDplG T&  <T!@plG < IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllT**0IDIb2G T&  <T!@Ib2G L IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll)G 0**IDFG T&  <T!@FG PhIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllT**ID_3G T&  <T!@_3G  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0ID2s3G T&  <T!@2s3G  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID[G T&  <T!@[G  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**IDfiG T&  <T!@fiG \ IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllTm@G T&  <TI-@f]G \ IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkID>JDID>JD`pX RU=T&TTWf[TK ? @UMF T~T)S&0**IDf]G T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@f]G \ IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll\t**0IDG T&  <T!@G IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ID{rG T&  <T!@{rG lIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllHD**IDBy6G T&  <T!@By6G P IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0IDKG T&  <T!@KG  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHD0**IDG T&  <T!@G IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllHD**ID!G T&  <T!@!G0IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0ID^ТG T&  <T!@^ТG0 IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll`ID0**IDjTG T&  <T!@jTG)tIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllaID**IDVmG T&  <T!@VmG) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0IDsG T&  <T!@sG)IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcID0**IDhb-G T&  <T!@hb-G) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**IDD:G T&  <T!@D:G) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0ID[FcG T&  <T!@[FcG)4IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHD0**ID'G T&  <T!@'G) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0ID(HG T&  <T!@(HG) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHD0**ID?9#G T&  <T!@?9#G)h h IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllHD**IDҜG T&  <T!@ҜG)h h IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0ID[G T&  <T!@[G)IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllkID0**IDLG T&  <T!@LG)tIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dlllID**IDLugG T&  <T!@LugG)h 4IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0ID{G T&  <T!@{G) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnID0**ID9uG T&  <T!@9uG) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**ID/G T&  <T!@/G) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**IDMfG T&  <T!@MfG) IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**0IDĻ.G T&  <T!@Ļ.G)IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**ID#VG T&  <T!@#VGPllIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllemR**0IDVG T&  <T!@VGPIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllipro0**IDpZG T&  <T!@pZGP<IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllst.**IDT#G T&  <T!@T#GP<IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllst.**0IDr +G T&  <T!@r +GP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**IDفmG T&  <T!@فmGP IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**IDp6G T&  <T!@p6G^PqIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllvse**ID58G T&  <T!@58G\b^XJh~5vIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllip**ID<8G T&  <T!@<8G\b^XJh~5vIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dllWIN3**(ID<8G T&  <T!@<8G\b^XJh~5vIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SEm>B3 ?+APSn g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMIT[Id .&T3 ClientMachine [T_User 2~T?ClientProcessId &T} Component &TPSg Operation (UJ ResultCode .@Uxb PossibleCause N{7F194F06-F8D8-487D-8BA1-223B8C8B7C69}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**IDAI?8G T&  <T!@AI?8G@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SN{97AF8C4E-C674-43B3-87CC-DD6CE6A0B7B5}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownin**IDAI?8G T&  <T!@AI?8G@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SN{CD920E0B-039B-4ACC-8836-481D7361CBDC}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownt%**ID)\R8G T&  <T!@)\R8G@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SN{884A927A-4B44-4DB1-A4DB-9F52923EBF6A}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownp**ID)\R8G T&  <T!@)\R8G@B2G@B2G(IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SN{B3997AA6-C6C3-439E-A54E-07F86BE8F64B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownna**ID)\R8G T&  <T!@)\R8G@B2G@B2G(IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SN{616BC1DC-F6D7-4D3A-B368-502ACF4DEA1B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**ID H^8G T&  <T!@ H^8G@B2G@B2G(IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational )SN{F360429B-2AA0-4794-AFA9-52692F3F2BBF}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowndo**IDܙ@G T&  <T!@ܙ@G@B2G@B2G IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dllo**IDAG T&  <T!@AG@B2G@B2G IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllB**0IDuFG T&  <T!@uFG@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**IDMPG T&  <T!@MPG@B2G@B2G  IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso** IDhZG T&  <T!@hZG@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dll **ID|ۿG T&  <T!@|ۿG@B2G@B2G$IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**IDt$G T&  <T!@t$G@B2G@B2G$IDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll0**0ID8'G T&  <T!@8'G@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IDaQG T&  <T!@aQG@B2G@B2GIDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JD@8G T&  <T!@@8G# l P JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll**0JDG T&  <T!@G:Pq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDL&G T&  <T!@L&G:Pq( JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JDVdKG T&  <T!@VdKG:Pq( JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0JDj_G T&  <T!@j_G:Pq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD-D@G T&  <T!@-D@G:Pq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JD$G T&  <T!@$G:PqH JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@ȗ**JD 4G T&  <T!@ 4G:Pq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0JD:G T&  <T!@:G:PqlJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@0** JDNG T&  <T!@NG:PqX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@p** JDz^G T&  <T!@z^G:PqX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0 JD6G T&  <T!@6G:Pq$ JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@0** JD G T&  <T!@ G:Pql  JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll<** JD6cG T&  <T!@6cG:Pq8 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0JDwG T&  <T!@wGJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@[0**JDKG T&  <T!@KGx JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll<**JD9%G T&  <T!@9%Gx JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll<**0JD%*G T&  <T!@%*G JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**JDJLG T&  <T!@JLGT \JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll<**JDO"{G T&  <T!@O"{GJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0JDUG T&  <T!@UG8JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**JD .{TG T&  <T!@ .{TG( JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**JDqF|G T&  <T!@qF|G( JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0JDsJG T&  <T!@sJGJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**JDG T&  <T!@GXd JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll<**JDp/G T&  <T!@p/G |JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0JD~CG T&  <T!@~CGLJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll<0**JD#TG T&  <T!@#TG JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JDٌG T&  <T!@ٌG JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0JDE G T&  <T!@E GJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDG T&  <T!@GP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**0JD8ջG T&  <T!@8ջGx oJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** JD(G T&  <T!@(Gx o JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**!JD }HG T&  <T!@ }HG0!JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0"JD[G T&  <T!@[G0P"JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**#JD9G T&  <T!@9G0$ #JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**$JD>iG T&  <T!@>iG0 $JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll{**0%JD\G T&  <T!@\G0%JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll[0**&JD&G T&  <T!@&G0 &JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**'JD-~G T&  <T!@-~G0 'JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0(JD7-G T&  <T!@7-G0(JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllity0**)JD _G T&  <T!@ _G0 )JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlly **0*JDĬsG T&  <T!@ĬsG0d *JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbem\0**+JD),G T&  <T!@),G0 +JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllSys**,JDR[G T&  <T!@R[G0 ,JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlldow**0-JD"&G T&  <T!@"&G0 -JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**.JDN}G T&  <T!@N}G0d .JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dlldow**/JDhѓG T&  <T!@hѓG0@ /JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dlldow**00JD G T&  <T!@ GP0 0JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**1JD=9}TG T&  <T!@=9}TGP  1JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**2JDhcG T&  <T!@hcGP 2JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlldow**3JDtG T&  <T!@tGP 3JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllwmi**04JD"lG T&  <T!@"lGP| 4JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllndow0**5JDaF>+G T&  <T!@aF>+GP5JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlldow**06JD!=?G T&  <T!@!=?GP 6JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll%Sys0**7JD縚G T&  <T!@縚GP X7JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlldow**8JDG T&  <T!@GP X8JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllwmi**09JDЗ G T&  <T!@З GP9JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllndow0**:JD$LG T&  <T!@$LGP :JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlldow**;JDBG T&  <T!@BGPH;JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllwmi**0JD&/G T&  <T!@&/GPh , >JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dlliprvse.exe@ T&  <Tn na000nal ElfChnk?JDJD?JDJDR6 ?A=dWfK ? MF 7&0**?JDWG T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@WGP ?JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**@JD$Y{G T&  <T!@$Y{GPX@JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**0AJDb~ G T&  <T!@b~ GPAJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**BJD*[G T&  <T!@*[GPxBJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**CJDZG T&  <T!@ZGPxCJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllHD**0DJDFgG T&  <T!@FgGPDJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllG0**EJD G T&  <T!@ GP EJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**PFJDJ5G T&  <T!@J5G@B2G@B2G(FJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ƩEm>B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .3 ClientMachine _User 2?ClientProcessId &7} Component &dg Operation (J ResultCode .xb PossibleCause N({32424080-47D0-0001-9A40-4232D047DC01}FILF-APP-RECNT AUTHORITY\SYSTEMUnknownStart IWbemServices::ExecQuery - ROOT\CIMV2 : Select * from Win32_Process Where ProcessID = '208'2UnknownWMIP**GJD\G T&  <T!@\G@B2G@B2G$ GJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0HJDpG T&  <T!@pG@B2G@B2G4HJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**IJDG T&  <T!@G0 , IJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllI**JJD*:G T&  <T!@*:G0 JJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0KJD"G T&  <T!@"G0KJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**LJDkG T&  <T!@kG0hLJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0MJD{nG T&  <T!@{nG0` MJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**NJDMNG T&  <T!@MNG0,, NJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllWMI**OJD-0tG T&  <T!@-0tG0,, OJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0PJDf䎈G T&  <T!@f䎈G0PJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**QJD9B[G T&  <T!@9B[G0T QJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**RJD+['G T&  <T!@+['G0@RJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0SJD=Z_;G T&  <T!@=Z_;GPqSJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**TJDG T&  <T!@GPq  TJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllI**UJD|G T&  <T!@|GPq8UJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0VJD0/G T&  <T!@0/GPqVJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**WJDCG T&  <T!@CGPq WJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0XJDeG T&  <T!@eGPqXJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**YJDXG T&  <T!@XGPqxYJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**ZJDb?G T&  <T!@b?GPqxZJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0[JDSG T&  <T!@SGPq, [JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**\JD+G T&  <T!@+GPq8\JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**]JDG T&  <T!@GPqld]JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0^JDϞG T&  <T!@ϞGPq^JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**_JDCNG T&  <T!@CNGPq l _JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllt**`JDNG T&  <T!@NGPq `JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0aJDԧqG T&  <T!@ԧqGPqaJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsib0**bJDfEXG T&  <T!@fEXGPq $bJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll!**0cJDU?lG T&  <T!@U?lGPqcJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll::Fi0**dJDG T&  <T!@GPqdJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllCBD**eJD- G T&  <T!@- GPqeJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllty**0fJD~G T&  <T!@~GPq< fJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**gJDrsyG T&  <T!@rsyGPq gJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll RO**hJDi߽G T&  <T!@i߽GPq, 8 hJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**0iJD G T&  <T!@ GPqLiJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**jJD)\G T&  <T!@)\GPq8 jJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllt**0kJD G T&  <T!@ G"0 kJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**0**lJD1#G T&  <T!@1#G"0 lJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlluF**0mJD7G T&  <T!@7G"0HmJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMP0**nJDayG T&  <T!@ayG"0hnJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllhZ**oJDPG T&  <T!@PG"0hoJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0pJDRG T&  <T!@RG"0LpJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**qJDHCG T&  <T!@HCG"08qJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll&**rJD|G T&  <T!@|G"0l \ rJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll****0sJD,G T&  <T!@,G"0 sJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**tJDG T&  <T!@GPq tJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**uJDTD'G T&  <T!@TD'GPqtuJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlll**0vJD?OG T&  <T!@?OGPqvJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllVdK0**wJDķG T&  <T!@ķGPq,wJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllj_**0xJD5jG T&  <T!@5jGPqxJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-D@0**yJD%U{G T&  <T!@%U{GPq4 HyJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll&**zJDEəG T&  <T!@EəGPq4 HzJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll&**0{JDG T&  <T!@GPq {JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**|JDcG T&  <T!@cGPq |JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**}JD[fqTG T&  <T!@[fqTGPq }JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0~JDZfhG T&  <T!@ZfhGPq~JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDEG T&  <T!@EGPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JDKG T&  <T!@KGPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll6c**0JDi2G T&  <T!@i2GPqH JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDRG T&  <T!@RGPqt JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllK**0JDKG T&  <T!@KGPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDMxKG T&  <T!@MxKGH,JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll**JDlG T&  <T!@lGH,JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllJL**0JDUӀG T&  <T!@UӀGd JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDjG T&  <T!@jG JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JDȝG T&  <T!@ȝGL JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll .{T**0JDT3G T&  <T!@T3Gl JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD,|G T&  <T!@,|G JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JDG T&  <T!@GlX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll****0JD@tG T&  <T!@@tG JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JDJG T&  <T!@JGJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0JDyTBG T&  <T!@yTBGJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JDWG T&  <T!@WG\ JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**JD8G T&  <T!@8G\ JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**0JD LG T&  <T!@ LG JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDXC8G T&  <T!@XC8G 0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**JDk)G T&  <T!@k)G 0, JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll(**0JDG T&  <T!@G 0JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDzG T&  <T!@zGX (JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JDg G T&  <T!@g GX XJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****0JD1G T&  <T!@1GX( JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JD닀PG T&  <T!@닀PGXtJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0JDD,dG T&  <T!@D,dGX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JD3B/G T&  <T!@3B/GX <JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**JDW\G T&  <T!@W\GX <JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0JDTG T&  <T!@TGX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDe4sG T&  <T!@e4sGXHJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll**JD}w!G T&  <T!@}w!GX( 8 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll),**0JD%G T&  <T!@%GX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD(sEG T&  <T!@(sEGX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JD(TG T&  <T!@(TGX$JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll****0JD|G T&  <T!@|GX JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JDcG T&  <T!@cGXD JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll&**0JDe/G T&  <T!@e/GX0JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JDulG T&  <T!@ulG Pq8 HJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**JDG T&  <T!@G Pq8 HJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**0JDyG T&  <T!@yG PqL JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD:G T&  <T!@:G Pq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**JDvjG T&  <T!@vjG Pqt JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll**0JDGfG T&  <T!@GfG Pq(JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDG T&  <T!@G00 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JD,!G T&  <T!@,!G00JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**JD]hOG T&  <T!@]hOG00, JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll****0JDf[G T&  <T!@f[G00LJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JDpSG T&  <T!@pSG00t JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0JD_j G T&  <T!@_j G00 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**JD)G T&  <T!@)G00JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JD7UG T&  <T!@7UGP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll  <Tn na000nal ElfChnkJDKDJDKD@pܰl}=n WfK ? MF &0**JDG T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@GP xJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0JD}G T&  <T!@}GP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDw]G T&  <T!@w]GPd JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0JD@VoqG T&  <T!@@VoqGPx JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD|@G T&  <T!@|@GPd JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllHD**JDcHH T&  <T!@cHHP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0JD?$H T&  <T!@?$HPDJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDH T&  <T!@HPlP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllm/w**0JDAH T&  <T!@AHP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllAUT0**JDljH T&  <T!@ljHPlP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll#F**JDEvH T&  <T!@EvHP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllv**JDsۄH T&  <T!@sۄHP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0JDSUމH T&  <T!@SUމHP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JD(H T&  <T!@(HP ,JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0JD쏳<H T&  <T!@쏳<HPJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JD2QH T&  <T!@2QHP ,JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**JDtH T&  <T!@tHPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0JD\H T&  <T!@\HPqtJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JDXH T&  <T!@XHPq(PJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll#F**0JD?RH T&  <T!@?RHPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JD9ѼH T&  <T!@9ѼHPq( JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll#F**JD{AH T&  <T!@{AHPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllv**JDPH T&  <T!@PHPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0JD, UH T&  <T!@, UHPq<JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JD)H T&  <T!@)HPq8  JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll#F**0JDH T&  <T!@HPqD JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JD'pH T&  <T!@'pHPq8  JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll#F**JDӨH T&  <T!@ӨHPqh(JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0JDH T&  <T!@HPq4JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**JD9YH T&  <T!@9YH@B2G`B2GLJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dll#F**JD ZH T&  <T!@ ZH@B2G.aB2Gd JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dllW**0JDYmH T&  <T!@YmH@B2GaB2GJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**JDPH T&  <T!@PH@B2GaB2GL JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dlltiv**JDK H T&  <T!@K H@B2GaB2G < JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllc**JDQH T&  <T!@QHPqxt JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllt-W**0JD`b H T&  <T!@`b HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**JD<H T&  <T!@<HPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllso**JD=H T&  <T!@=HPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dll**JD{c8H T&  <T!@{c8HPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllP**0JD;z2H T&  <T!@;z2HPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDTH T&  <T!@THPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JD[tH T&  <T!@[tHPql JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllP**0JDH T&  <T!@H0JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD$ H T&  <T!@$ H0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0JDe8 H T&  <T!@e8 H0LJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD@YT H T&  <T!@@YT H0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JDN7 H T&  <T!@N7 H0  JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JD  H T&  <T!@  H0`JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll@**0JD}y H T&  <T!@}y H0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@ay0**JD.| H T&  <T!@.| H0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0JDb H T&  <T!@b H0JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllLpJ0**JD:. H T&  <T!@:. H0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@H**JD>= H T&  <T!@>= H0x0 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll@|**0JDSeBQ H T&  <T!@SeBQ HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll sJ0**JD$; H T&  <T!@$; HPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@**0JD" H T&  <T!@" HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD H T&  <T!@ HPqd JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**JD5F H T&  <T!@5F HPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**JDl H T&  <T!@l HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@5j**0JD H T&  <T!@ HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@%0**JDMU H T&  <T!@MU HPqDJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@E**0JD dzi H T&  <T!@ dzi HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll {J0**JD* H T&  <T!@* HPqDJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**JD*~H T&  <T!@*~HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@[f**0JD܄H T&  <T!@܄HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll~J0**JDARWH T&  <T!@ARWHPq<JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@E**0JD:VH T&  <T!@:VHPq JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDH T&  <T!@HPqJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**JD 'nH T&  <T!@ 'nHPq D JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllP**0JDD&H T&  <T!@D&HPXJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD~!H T&  <T!@~!HP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0JD4H T&  <T!@4HPJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JDeKH T&  <T!@eKHP $ JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**JD۔H T&  <T!@۔HP8 JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll**0JDz&H T&  <T!@z&HPJDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**JD}H T&  <T!@}HP JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllJ**JD{0iH T&  <T!@{0iHPX |JDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll@,**0KD H T&  <T!@ HPKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KDvLH T&  <T!@vLHPX |KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll**KD[Tg9H T&  <T!@[Tg9HP0KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0KDDeMH T&  <T!@DeMHPp KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KDb'<H T&  <T!@b'<HP H KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KD8H T&  <T!@8HPKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KD~H T&  <T!@~HP H KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**KDH T&  <T!@HP KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll0**0KDH T&  <T!@HKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** KD86RH T&  <T!@86RH  KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllJ** KD_H T&  <T!@_HX KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**0 KDleH T&  <T!@leH$ KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** KDGw{H T&  <T!@Gw{HX KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** KDM H T&  <T!@M H KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0KD4<H T&  <T!@4<H KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KDqH T&  <T!@qH xKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KDTxH T&  <T!@TxH<KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KDH T&  <T!@HtKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**KD@jH T&  <T!@@jH KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0KDH~H T&  <T!@H~H<KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KDv *H T&  <T!@v *HxKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll**0KD1H T&  <T!@1HKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**KDIH T&  <T!@IHxKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dlloso**KDH T&  <T!@H H KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloso**0KDH T&  <T!@H PqKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**KD3&H T&  <T!@3&H PqTKDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dlloso**0KD(H T&  <T!@(H Pq0KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**KD߲H T&  <T!@߲H Pq KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**KDfŋ5H T&  <T!@fŋ5H Pql KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dlloso**0KDIH T&  <T!@IH Pq0KDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0indows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**CDƒB3 ?+AWg<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI [Id .- 3 ClientMachine b _User 2 ?ClientProcessId & } Component & Wg Operation ( J ResultCode .G xb PossibleCause N{63FAE03C-74CA-4BB2-B89B-D5249088E74E}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown **CD=F T&  <T!@=FS@=Fb@=FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0N{651F3051-B4A3-4B7A-AA9A-EE4EA6291B58}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowno9u**CD=F T&  <T!@=FS@=Fb@=FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0N{C3E6C9B5-E170-4672-8A2E-25C6A796E0EC}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknowniv**CD=F T&  <T!@=FS@=Fb@=FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0N{76DEF3B0-2164-4EDD-A067-F1D003E55417}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownse**CD=F T&  <T!@=FS@=F|@=F$CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0N{E2D8CA4C-2D9D-410A-B1EF-DDDB46827F1F}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownT**CD=F T&  <T!@=FS@=F|@=F$CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0N{ED7BA6A2-7523-435A-81E4-9CC1FD51CA9B}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownws**CD8I=F T&  <T!@8I=FS@=F|@=F$CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0N{F7D70C35-EF28-4981-B762-DBEF8D086B4E}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownt.**CD=F T&  <T]!@=FS@=F|@=F CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000\M!kb]˒A)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI,< ProviderName sCode * HostProcess   ,I v# ProviderPath TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dllRWm**CD=F T&  <T!@=FS@=F|@=F CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**CD>F T&  <T!@>FS@=F|@=FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dll** CD>F T&  <T!@>FS@=F|@=FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllona **CDu:>F T&  <T!@u:>FS@=F|@=F@`CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllona**0CDSE>F T&  <T!@SE>FS@=F|@=Fd CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**CD`i>F T&  <T!@`i>FqPdU@p CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllona**CD_>F T&  <T!@_>FqPdUxCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0CD-l>F T&  <T!@-l>FqPdU CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**CD$?F T&  <T!@$?F CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0CDC*?F T&  <T!@C*?FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**CDX?F T&  <T!@X?F$CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllona**CDJ{X@F T&  <T!@J{X@FCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0CDu]@F T&  <T!@u]@F CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**CD@F T&  <T!@@F| CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllona**0CDAF T&  <T!@AF CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**CDp5AF T&  <T!@p5AF CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**CDٗAF T&  <T!@ٗAF CDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0CDyAF T&  <T!@yAFCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**CD3ebBF T&  <T!@3ebBFP(DCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllona**0CDYivBF T&  <T!@YivBFPCDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDBF T&  <T!@BFP P DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**DDe1CF T&  <T!@e1CFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0DDe<)CF T&  <T!@e<)CF0( DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDCF T&  <T!@CF0TTDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllona**0DDy CF T&  <T!@y CF0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DD^ DF T&  <T!@^ DF0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**DDzzDF T&  <T!@zzDF0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0DDxQݎDF T&  <T!@xQݎDF0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDhuMFF T&  <T!@>uMFF PdD DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllona**0DDPLFF T&  <T!@PLFF PDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDWFF T&  <T!@WFF P8 $ DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllona**DDFGF T&  <T!@FGF P` DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllona**0DDZGF T&  <T!@ZGF PXDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDG*HF T&  <T!@G*HF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0DDw HF T&  <T!@w HF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DD=,HF T&  <T!@=,HF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**DD־HF T&  <T!@־HF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0DD{HF T&  <T!@{HF+0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DD@Å^IF T&  <T!@@Å^IF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0DDŋrIF T&  <T!@ŋrIF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DD(IF T&  <T!@(IF+0x DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**DDZJF T&  <T!@ZJF+0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0DD]a%JF T&  <T!@]a%JF+0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDڞJF T&  <T!@ڞJFPdUdDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllona**0DD8O*JF T&  <T!@8O*JFPdUDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DD1JF T&  <T!@1JFPdUdDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllona**DDKF T&  <T!@KFPdU DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0 DDKF T&  <T!@KFPdU DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**!DD)LF T&  <T!@)LFPdU!DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0"DD*;=LF T&  <T!@*;=LFPdU"DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**#DDqVbLF T&  <T!@qVbLFPdUP #DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllona**$DD7LF T&  <T!@7LFPdU,( $DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllona**0%DDLF T&  <T!@LFPdU,%DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**&DD;OMF T&  <T!@;OMFPdUD&DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllona**0'DDiMF T&  <T!@iMFPdU0'DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**(DD}3MF T&  <T!@}3MFPdUD(DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllona**)DD#@BNF T&  <T!@#@BNFPdU )DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0*DDM::VNF T&  <T!@M::VNFPdU*DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**+DD-r NF T&  <T!@-r NF8 +DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllona**0,DDS OF T&  <T!@S OF,DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**-DDk-OF T&  <T!@k-OFh-DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**.DDnqOF T&  <T!@nqOF.DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**0/DD6ݻOF T&  <T!@6ݻOF/DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**0DDiPF T&  <T!@iPF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**01DDnPF T&  <T!@nPF$1DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**2DDfՍPF T&  <T!@fՍPF 8 2DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**3DDtqx QF T&  <T!@tqx QF\`3DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllona**04DD|!QF T&  <T!@|!QF 4DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**5DDMQF T&  <T!@MQFD5DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllona**06DDNQF T&  <T!@NQF$6DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**7DDeQF T&  <T!@eQF  7DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**8DDi]sRF T&  <T!@i]sRF 48DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**09DD_RF T&  <T!@_RF 9DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**:DD`4SF T&  <T!@`4SF PdU@:DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllona**0;DDZs9SF T&  <T!@Zs9SF PdU;DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DD%SF T&  <T!@%SF0 >DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**?DD{TF T&  <T!@{TF0p 4?DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllona**0@DD0_TF T&  <T!@0_TF0 @DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**ADDTF T&  <T!@TF0 ADDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**BDD_>UF T&  <T!@_>UF0pBDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllona**0CDDJ7aRUF T&  <T!@J7aRUF0@ CDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**DDDVF T&  <T!@VF0H DDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllona**0EDD,VF T&  <T!@,VF0 EDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**FDD2%VF T&  <T!@2%VF0H FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeH C:\Windows\System32\wbem\WmiPerfInst.dllona**GDD%VF T&  <T!@%VF0 | GDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0HDDs^VF T&  <T!@s^VF0HDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**IDDFVWF T&  <T!@FVWF0d$ IDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllona**0JDD6jWF T&  <T!@6jWFP JDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**KDDdYWF T&  <T!@dYWFP KDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**LDD XF T&  <T!@ XFPTLDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllona**0MDDXF T&  <T!@XFP MDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**NDDsMXF T&  <T!@sMXFP NDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllona**0ODDnXF T&  <T!@nXFP8 ODDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**PDDz^XF T&  <T!@z^XFP| PDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllona**QDD͕;oYF T&  <T!@͕;oYFP@QDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllona**0RDD5?YF T&  <T!@5?YFP RDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlliona0**SDDm"ZF T&  <T!@m"ZFPD <SDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll 00**0TDD6ZF T&  <T!@6ZFPTDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllbwmi0wmiprvse. T&  <Tcroft-Windows-W T&  <TTmiPerfInst.dllvitOperational ElfChnkUDDDDUDDDDAE=n WfK ? MF &0**UDDB7ZZF T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@B7ZZFP`UDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**VDDFZF T&  <T!@FZFP $VDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllF**0WDDZF T&  <T!@ZFP< WDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnt0**XDDԄ[F T&  <T!@Ԅ[FPdU XDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllP**0YDD&5[F T&  <T!@&5[FPdU YDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**ZDD{[F T&  <T!@{[FPdU ZDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**[DD1:\F T&  <T!@1:\F0 [DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllows**0\DD0~N\F T&  <T!@0~N\F0 \DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-9CC0**]DDݧR\F T&  <T!@ݧR\F0  ]DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0^DDn]]F T&  <T!@n]]F0 ^DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**_DD&]F T&  <T!@&]F0 _DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**`DDR ]F T&  <T!@R ]F0 `DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllFS@**0aDD9 )]F T&  <T!@9 )]F04 aDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**bDDa^F T&  <T!@a^F0bDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**0cDD f^F T&  <T!@ f^F0 cDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**dDD$^F T&  <T!@$^F0dDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**eDDk_F T&  <T!@k_F0TPeDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**0fDD_F T&  <T!@_F0 fDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**gDDC_F T&  <T!@C_F0 <gDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0hDDZ_F T&  <T!@Z_FPdU| hDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**iDD_F T&  <T!@_FPdUH iDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllndo**jDDk[k`F T&  <T!@k[k`FPdU ( jDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0kDDc`F T&  <T!@c`FPdUkDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**lDDo -aF T&  <T!@o -aFPdUlDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0mDD12aF T&  <T!@12aFPdUmDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**nDDTaF T&  <T!@TaFPdUnDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**oDD daF T&  <T!@ daFPdUL oDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll**0pDDaF T&  <T!@aFPdU pDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**qDDwۃbF T&  <T!@wۃbFPdU ( qDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0rDDҗbF T&  <T!@җbFPdU rDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**sDDbF T&  <T!@bFPdUD sDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllndo**tDD6cF T&  <T!@6cFPdU PtDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0uDDJcF T&  <T!@JcFPdUtuDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**vDDOcF T&  <T!@OcFPdU vDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0wDD[YqcF T&  <T!@[YqcFPdU8 wDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**xDDsdF T&  <T!@sdFPdU xDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**yDDmdF T&  <T!@mdF 0lhyDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dll**0zDD:AdF T&  <T!@:AdF 0zDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**{DD}OeF T&  <T!@}OeF 0 {DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0|DDEceF T&  <T!@EceF 0 |DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**}DDWeF T&  <T!@WeF 0`x }DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllndo**~DD}fF T&  <T!@}fF 0~DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DDCfF T&  <T!@CfF 0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DD fF T&  <T!@ fF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**0DD0fF T&  <T!@0fF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DD\BfF T&  <T!@\BfF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**DDu-ggF T&  <T!@u-ggF 0, DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**0DD {gF T&  <T!@ {gF 0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DD,ahF T&  <T!@,ahF 0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0DDT.hF T&  <T!@T.hF 0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DDFShF T&  <T!@FShFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**DD+4hF T&  <T!@+4hFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DD&hF T&  <T!@&hFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DDx؎iF T&  <T!@x؎iFP\ DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllndo**0DDiF T&  <T!@iFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DDTiF T&  <T!@TiFP\ DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllndo**DDۅjF T&  <T!@ۅjFP  DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0DDF:jF T&  <T!@F:jFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DDJf$kF T&  <T!@Jf$kFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllndo**0DD|j?kF T&  <T!@|j?kFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**DDBʱkF T&  <T!@BʱkFPHt DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllndo**DDOkF T&  <T!@OkFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllD**DD(.kF T&  <T!@(.kFP\DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll D**0DDٰ8kF T&  <T!@ٰ8kFPtDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**DDClF T&  <T!@ClF  x DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll!D**0DD lF T&  <T!@ lF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**DDpAmF T&  <T!@pAmF DDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll #D**DDCmF T&  <T!@CmF ( XDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll $D**0DDWmF T&  <T!@WmF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**DD1GmF T&  <T!@1GmF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&D**0DD nF T&  <T!@ nF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllroso0**DD{nF T&  <T!@{nF  0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**DDKpnF T&  <T!@KpnF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllP**DD3~nF T&  <T!@3~nF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllP**0DDWnF T&  <T!@WnF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DDMoF T&  <T!@MoF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DD[JpoF T&  <T!@[JpoF 0| DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DD/ oF T&  <T!@/ oF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**DDpF T&  <T!@pF 0lDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DDu#pF T&  <T!@u#pF 0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DDopF T&  <T!@opFPD ,DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0DDLpF T&  <T!@LpFP<DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DD lGqF T&  <T!@ lGqFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllq**DDUqF T&  <T!@UqFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@**DDtqF T&  <T!@tqFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0DD@`qF T&  <T!@@`qFP<DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@0**DDCrF T&  <T!@CrFPDDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll<**0DDՌ;rF T&  <T!@Ռ;rFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@i]0**DDMrF T&  <T!@MrFPLDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@_**DDTrF T&  <T!@TrFPLDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll<**0DDK]rF T&  <T!@K]rFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@Zs0**DDsF T&  <T!@sFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll<**0DD-sF T&  <T!@-sFPDDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll@ܩ0**DDtF T&  <T!@tFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**DD}"tF T&  <T!@}"tFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**DD p?tF T&  <T!@ p?tFP DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0DDM7StF T&  <T!@M7StFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DDtF T&  <T!@tFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DDKuF T&  <T!@KuFPdU DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**DDruF T&  <T!@ruFPdUDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**DD4uF T&  <T!@4uFPdUDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DD#uF T&  <T!@#uFPdUDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DD!2NvF T&  <T!@!2NvFPdUX DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll**0DDiqlvF T&  <T!@iqlvF0T DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll!0**DD:AvF T&  <T!@:AvF0 DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**DD7pvF T&  <T!@7pvF0 $ DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**DDn< wF T&  <T!@n< wF0 $ DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0DD=wF T&  <T!@=wF0@ DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DDlwF T&  <T!@lwF0TDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**0DDwF T&  <T!@wF0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DDd!>xF T&  <T!@d!>xF0 D DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**DD;pxF T&  <T!@;pxF0 `DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0DD]xF T&  <T!@]xF04DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DD"=yF T&  <T!@"=yF0DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0DDҳ7yF T&  <T!@ҳ7yFPdU4DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**DDAyF T&  <T!@AyFPdU DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll**DDVM׵yF T&  <T!@VM׵yFPdU4TDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllrvs T& T&  <Tows-W T&  <TTmiPerfInst.dllvitOperational ElfChnkDD>EDDD>EDHX^x" =n WfK ? MF &0**DD?yF T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@?yFPdU4TDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**0DDByF T&  <T!@ByFPdUDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**DD.$yzF T&  <T!@.$yzFPdU x DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt**0DDMzF T&  <T!@MzFPdU DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**DDR5{F T&  <T!@R5{FPdU DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**DD1<{F T&  <T!@1<{FPdU8DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll<**0DDo P{F T&  <T!@o P{FPdU@DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllF0**DD#$<{F T&  <T!@#$<{FS@=FG=F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dlld**DD k{F T&  <T!@ k{FS@=F4k=F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0DD|F T&  <T!@|FS@=F4k=F, DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**DD|Rt|F T&  <T!@|Rt|FS@=F4k=F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**DDq G|F T&  <T!@q G|FS@=F4k=F  DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**DDɡ|F T&  <T!@ɡ|FS@=F4k=F  DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllemR**0DD@|F T&  <T!@@|FS@=F4k=FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**DDJ}F T&  <T!@J}FS@=F4k=FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0DDnh}F T&  <T!@nh}F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**DDKՋ}F T&  <T!@KՋ}FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**DDW~F T&  <T!@W~FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0DDY:~F T&  <T!@Y:~F8DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**DD;~F T&  <T!@;~FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0DD<9~F T&  <T!@<9~FT DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**DDyO6EF T&  <T!@yO6EF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllw**DDjSF T&  <T!@jSFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**DD{0lF T&  <T!@{0lFPDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0DDF T&  <T!@Ft DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle0**DDF T&  <T!@F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0DD|F3F T&  <T!@|F3F\DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**DDF T&  <T!@F TDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**DD1CҀF T&  <T!@1CҀF TDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0DDټF T&  <T!@ټFDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlle0**DDηr{F T&  <T!@ηr{FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Wi**0DDi2rF T&  <T!@i2rFDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll32\w0**DD́F T&  <T!@́F lDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**DDԜDF T&  <T!@ԜDF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**DD&C:8F T&  <T!@&C:8F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**0DDBLF T&  <T!@BLFDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0**DDڂF T&  <T!@ڂF  DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllexe**0DDջF T&  <T!@ջFTDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllprvs0**DDdjF T&  <T!@djFDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllexe**DDߝF T&  <T!@ߝFDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVIC**0DD1᱃F T&  <T!@1᱃Fp DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0**DDSFF T&  <T!@SFFLDDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllexe**0DDdF T&  <T!@dFp DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllprvs0**DD UWԄF T&  <T!@ UWԄF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllp**DDoF T&  <T!@oFHDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllMIN**DDAF T&  <T!@AFHDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllWm**0DD7F T&  <T!@7FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**DD 'F T&  <T!@ 'F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMIN**0DD&RʅF T&  <T!@&RʅFp DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**DD˰7F T&  <T!@˰7FDDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMIN**DDY(iF T&  <T!@Y(iFH DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllWm**0DD #}F T&  <T!@ #}F DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**DD80DF T&  <T!@80DF DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllMIN**0DD3/F T&  <T!@3/F8DDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**ED?F T&  <T!@?F @EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll3**EDtFF T&  <T!@tFF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**ED>·F T&  <T!@>·F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0EDMF T&  <T!@MFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**EDovF T&  <T!@ovF!0 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ED੕F T&  <T!@੕F!0\EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**ED1 F T&  <T!@1 F!0 EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**ED,Z4F T&  <T!@,Z4F!0 t EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0EDPSQF T&  <T!@PSQF!08EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0** ED(F T&  <T!@(F!0p EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllMIN**0 EDXV5F T&  <T!@XV5F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0** ED_mF T&  <T!@_mF  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll3** EDc?{F T&  <T!@c?{F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** EDF T&  <T!@F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0EDjF T&  <T!@jFx EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**EDVBF T&  <T!@VBFt EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll**0EDB`F T&  <T!@B`FtEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**ED-7͋F T&  <T!@-7͋F` EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**EDF T&  <T!@F` EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**0EDUF T&  <T!@UFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**EDpqF T&  <T!@pqFh EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMIN**0EDƌF T&  <T!@ƌFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**ED0Fe5F T&  <T!@0Fe5F @EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll3**ED_CF T&  <T!@_CFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**ED7z:eF T&  <T!@7z:eFEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0EDAEyF T&  <T!@AEyF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**EDy" F T&  <T!@y" F EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0EDs,F T&  <T!@s,F TEDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**EDF T&  <T!@F d EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**ED*ʎF T&  <T!@*ʎF $EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**0EDB-ގF T&  <T!@B-ގF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**EDN7oF T&  <T!@N7oF EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMIN**0 ED@F T&  <T!@@F  EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**!EDӕF T&  <T!@ӕF  8 !EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll3**"EDP$ F T&  <T!@P$ F "EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**#EDڅ0F T&  <T!@څ0F #EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0$ED݋DF T&  <T!@݋DF $EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**%ED<ېF T&  <T!@<ېF  %EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0&ED,UF T&  <T!@,UF &EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**'EDQfF T&  <T!@QfF P'EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll**(EDmP0F T&  <T!@mP0F  (EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWm**0)ED(F T&  <T!@(F \)EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0***ED(EF T&  <T!@(EF T*EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllMIN**0+EDK\F T&  <T!@K\F +EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**,EDq˒F T&  <T!@q˒F |,EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll3**-EDqڒF T&  <T!@qڒF -EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**.EDrF T&  <T!@rF .EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0/ED}F T&  <T!@}F/EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**0EDDF T&  <T!@DF$0EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**01ED“F T&  <T!@“F 1EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**2ED3e.F T&  <T!@3e.F 2EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**3ED-waaF T&  <T!@-waaFl| 3EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllWm**04EDyguF T&  <T!@yguF 4EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**5ED F T&  <T!@ F0 5EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllMIN**06ED7(F T&  <T!@7(FP6EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllwmip0**7EDxF T&  <T!@xF | 7EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll3**8EDl&F T&  <T!@l&FX 8EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**9EDǕF T&  <T!@ǕFX 9EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dll**0:ED{eەF T&  <T!@{eەFP:EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**;ED-mF T&  <T!@-mF|$;EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll**0EDN,F T&  <T!@N,F >EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWmerfInstwm T&  <Trf@5Q@F ?EDMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFt.dllvitOperational