ElfFile|B_x-$ElfChnkBBBB+Ts=n WfK ? MF &0**BIT T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@ITEL BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll\t**B]ơ T&  <T!@]ơEt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0BA}ڡ T&  <T!@A}ڡP(BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllB0**BV T&  <T!@VP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll3B**0Bn T&  <T!@nPDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bd T&  <T!@dP$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**BG+ T&  <T!@G+P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll6B**0BoA@ T&  <T!@oA@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BZ T&  <T!@ZPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**BM9ޣ T&  <T!@M9ޣP XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll9B**0B- T&  <T!@-PDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B?0[ T&  <T!@?0[P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**Bf T&  <T!@fP0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **B_' T&  <T!@_'xzN+g>$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0B{< T&  <T!@{<PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**Bb T&  <T!@bP \ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **Bܪ T&  <T!@ܪPTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0BML T&  <T!@MLPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**Bj'U T&  <T!@j'UP@( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll **B/) T&  <T!@/)PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0Bo) T&  <T!@o)P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**B s T&  <T!@ sPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **Bl*.N T&  <T!@l*.NP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0B~RT T&  <T!@~RTPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**B!9G T&  <T!@!9GP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **BA2 T&  <T!@A2P 8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **0B T&  <T!@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**BV'o T&  <T!@V'oP8 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll **B# T&  <T!@#PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0B` T&  <T!@`PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**B@  T&  <T!@@ P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **BpSX T&  <T!@pSXP(< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll **0B%gm T&  <T!@%gmBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**B/X T&  <T!@/X, BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll **B  T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **0BJ:  T&  <T!@J: BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**B/͎ T&  <T!@/͎BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll **B)C T&  <T!@)CBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0B ӯ T&  <T!@ ӯTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll 0**B7 T&  <T!@7 hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll **BETq T&  <T!@ETq BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0BRޅ T&  <T!@RޅBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B< T&  <T!@<,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllT**Bb1 T&  <T!@b1 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0BK8 T&  <T!@K8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B3 T&  <T!@3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**Bֱ T&  <T!@ֱ( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll**0B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B][Q T&  <T!@][Q\ |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllT**Bvȉ T&  <T!@vȉTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0BVX T&  <T!@VX P\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B T&  <T!@ P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**B:< T&  <T!@:< P ( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0B 2)Q T&  <T!@ 2)Q P\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**Bq-Ƴ T&  <T!@q-Ƴ P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**B/u} T&  <T!@/u} PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0B$0 T&  <T!@$0 PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**Bݢi T&  <T!@ݢi PxBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllT**BeL T&  <T!@eL P, @ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll**0B\|϶ T&  <T!@\|϶ PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**Bu T&  <T!@u P`\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllT**B,U T&  <T!@,U P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0Bi T&  <T!@i Pp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B+70ϵ T&  <T!@+70ϵ P$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllT**B T&  <T!@ P8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll**0Bs T&  <T!@s PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B a T&  <T!@ a P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**Bl T&  <T!@l PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0BH϶ T&  <T!@H϶BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B1}65 T&  <T!@1}65 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**BXm T&  <T!@Xm BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0B, T&  <T!@,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**BÛ T&  <T!@Û |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT**Bd  T&  <T!@d  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0B= T&  <T!@= BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B⧸ T&  <T!@⧸ x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT** B4Ӹ T&  <T!@4Ӹ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0 B T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0** BvM T&  <T!@vM@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT** BkF T&  <T!@kFl BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0 Bۏ T&  <T!@ۏD BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B T&  <T!@x` BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllT**B8 T&  <T!@8 hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0BaM T&  <T!@aMp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**Bt T&  <T!@tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**B q T&  <T!@ q$t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll**0Bn4 T&  <T!@n4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B-e T&  <T!@-e BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllT**B T&  <T!@ \ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0BN T&  <T!@N BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT0**B0 T&  <T!@0 $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllT**B|S T&  <T!@|SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll  < T&  <Tosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal 000nal ElfChnkBBBBp+;d=n WfK ? MF &0**B#e T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@#eT BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**B3{ͼ T&  <T!@3{ͼ\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll**Bq T&  <T!@qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0BD T&  <T!@DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B^ T&  <T!@^$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**B T&  <T!@0 hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dll**0Bq7˽ T&  <T!@q7˽BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** B\V3 T&  <T!@\V3 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**!B4|i T&  <T!@4|i !BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0"BX~ T&  <T!@X~ "BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**#BH T&  <T!@H P #BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**$BX T&  <T!@X $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0%BɆ,1 T&  <T!@Ɇ,1Tuh =Tuh, %BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**&Bbt T&  <T!@btTuh =Tuh&BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**'B8ݿ T&  <T!@8ݿTuh =Tuh0'BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll**0(B T&  <T!@Tuh =Tuh(BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**)BaJ T&  <T!@aJTuh =Tuh )BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll***Bj> T&  <T!@j>Tuh =Tuh  *BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0+B)_ǖ T&  <T!@)_ǖTuh =Tuh+BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**,Bv  T&  <T!@v Tuh =Tuh$,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**-B$5 T&  <T!@$5Tuh =Tuh$-BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0.BI T&  <T!@ITuh =Tuh .BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**/B6 T&  <T!@6Tuh =Tuh /BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0Bt T&  <T!@tTuh =Tuh\ 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll**01B< m T&  <T!@< mTuh =TuhT1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**2B,d T&  <T!@,dTuh =Tuh 2BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlld**3Bhr T&  <T!@hrTuh =Tuhp h 3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllst.**4B㼚 T&  <T!@㼚Tuh =Tuh4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**05B{> T&  <T!@{>Tuh =Tuh 5BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**6Beuv T&  <T!@euvTuh =Tuh, @ 6BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllst.**7BBM T&  <T!@BMTuh =Tuhh7BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**08Bb T&  <T!@b8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**9Bn;r T&  <T!@n;r$49BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllst.**:B[ T&  <T!@[:BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0;B< T&  <T!@<;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**B5` T&  <T!@5` >BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**?B,/ T&  <T!@,/?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**@Bn T&  <T!@n @BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0ABΖz T&  <T!@Ζz ABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**BBz T&  <T!@zBBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**CB9 T&  <T!@9$ CBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0DBZ- T&  <T!@Z-DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**EBpJh T&  <T!@pJh< EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**FB6iT T&  <T!@6iTFBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0GB/. T&  <T!@/.p GBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**HB!T T&  <T!@!TP HBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**IBWv~ T&  <T!@Wv~ IBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0JBP T&  <T!@P  JBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**KB T&  <T!@ KBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**LBx!L1 T&  <T!@x!L1 0HLBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0MB]E T&  <T!@]E 0MBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**NB T&  <T!@ 0 NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**OB T&  <T!@ 0 |OBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0PB;C T&  <T!@;C 0 PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**QBi+] T&  <T!@i+] 08 QBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**RB| T&  <T!@| 08 RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0SBu T&  <T!@u 0SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**TB6m T&  <T!@6m 0, TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**UBI T&  <T!@I 0L UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeLC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0VB.I^ T&  <T!@.I^ 0 VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**WB1W T&  <T!@1W 0t WBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**XB@ T&  <T!@@ 0 XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0YB4 T&  <T!@4 0\YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**ZBvw T&  <T!@vw 0 ZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**[Bl T&  <T!@l 0 [BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrvs**0\BA T&  <T!@A  \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**]B77 T&  <T!@77 $< ]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll\Sy**^B:|d T&  <T!@:|d  ^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0_Bv T&  <T!@v x _BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**`B+] T&  <T!@+] T`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\Sy**aB T&  <T!@  < aBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrvs**0bBʑ) T&  <T!@ʑ)  bBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls\Sy0**cB0\K T&  <T!@0\K t cBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dllow**dB.L T&  <T!@.L t dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dll_Pr**0eBL T&  <T!@L x eBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**fBd T&  <T!@d  PfBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll C**gBx T&  <T!@x  gBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0hB5i T&  <T!@5i D hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**iBOxL T&  <T!@OxL  iBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllC**jBĊ T&  <T!@Ċ  jBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0kBЏ T&  <T!@Џ kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllxC0**lBle T&  <T!@le lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll, C**mB82 T&  <T!@82  mBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0nBe B T&  <T!@e B x nBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll`C0**oB@8 T&  <T!@@8 d oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll C**pBc3 T&  <T!@c3 pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0qB T&  <T!@P qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll$ C0**rBZ T&  <T!@ZP 8 rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll8C**sBz  T&  <T!@z P$sBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0tBo T&  <T!@oP8tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**uB) T&  <T!@)P uBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllC**vBxE T&  <T!@xEPvBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0wBdZ T&  <T!@dZ0 wBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**xBE T&  <T!@E0DxBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll C**yB( T&  <T!@(0yBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0zBR  T&  <T!@R 0zBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll C0**{BXlr T&  <T!@Xlr0{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll C**|B( T&  <T!@(0t |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0}B'% T&  <T!@'%0 }BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll C0**~B j$ T&  <T!@ j$0 ~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllC**B.l T&  <T!@.l0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0Bdr T&  <T!@dr0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**Bs T&  <T!@s0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllC**BPa T&  <T!@Pa0<BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0B*% T&  <T!@*%P|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllxC0**Bp0 T&  <T!@p0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll C**B  T&  <T!@ PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0B T&  <T!@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**Bԅ A T&  <T!@ԅ APPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$C**BVnv T&  <T!@VnvPT \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0B`n T&  <T!@`nPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllC0**B+  T&  <T!@+ PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll C**Bd) T&  <T!@d)P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll_Pr**0B##K> T&  <T!@##K>PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll C0**BٯM T&  <T!@ٯMPP DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllCWindows\Syst T&  <T@4P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Rnal ElfChnkBBBBZbD.=n WfK ? MF &0**B4 T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@4P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0BL T&  <T!@LPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B%V T&  <T!@%VP | BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**B|] T&  <T!@|]PX  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B T&  <T!@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B  T&  <T!@ P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**BO T&  <T!@OPX BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B?YV T&  <T!@?YV BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BR T&  <T!@R BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B) T&  <T!@) < BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B_  T&  <T!@_  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B&p T&  <T!@&p , BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**Baק T&  <T!@aק  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Bi ^ T&  <T!@i ^ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bf@  T&  <T!@f@  t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dll**BۖZ T&  <T!@ۖZ  lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B8F0o T&  <T!@8F0o BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B6C T&  <T!@6C BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**Bl}  T&  <T!@l}  | BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B" T&  <T!@"  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BS T&  <T!@S ( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B"O T&  <T!@"O BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B T&  <T!@  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B< T&  <T!@<PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**B!s T&  <T!@!sPhuhpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BP T&  <T!@PP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll3B0**B4 T&  <T!@4P$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll4B**Bj3 T&  <T!@j3P( $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll5B**0Biz: T&  <T!@iz:PtBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll6B0**B8 T&  <T!@8PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll7B**B1 T&  <T!@1PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll8B**0B lK T&  <T!@ lKPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll9B0**B0+R T&  <T!@0+RP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll:B**Bq T&  <T!@qPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll;B**0Bt- T&  <T!@t-PX BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll T&  <T!@b>P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll>B**0BVR T&  <T!@VRP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll?B0**B6  T&  <T!@6 P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll@B**BL]E T&  <T!@L]EP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllAB**0B T&  <T!@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllBB0**Bwk T&  <T!@wkP\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllCB**BU T&  <T!@UP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllDB**0BxA T&  <T!@xA8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllEB0**BA T&  <T!@A BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllFB**BnW T&  <T!@nW( H BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllGB**0B?hk T&  <T!@?hkP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHB0**B & T&  <T!@ &BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIB**BK  T&  <T!@K  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllJB**0B; T&  <T!@;P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllKB0**Bn T&  <T!@nTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllLB**B T&  <T!@\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMB**0BG*  T&  <T!@G* d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllNB0**BX6 T&  <T!@X6p\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllOB**BWo T&  <T!@Wo BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllPB**0B߃ T&  <T!@߃BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllQB0**BS T&  <T!@S$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllRB**B,+ T&  <T!@,+< pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllSB**0B,NI7 T&  <T!@,NI7 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllTB0**B T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllUB**B. T&  <T!@.dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllVB**0BO T&  <T!@OBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWB0**BmO T&  <T!@mO<BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllXB**Bۗ߇ T&  <T!@ۗ߇ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllYB**0BV T&  <T!@VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZB0**B(3 T&  <T!@(3\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll[B**Bs: T&  <T!@s: BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\B**0BN(O T&  <T!@N(O BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll]B0**BP T&  <T!@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll^B**BLy T&  <T!@Ly BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll_B**0B T&  <T!@< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll`B0**Bv T&  <T!@vXBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllaB**BiF T&  <T!@iF( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllbB**0B̴ T&  <T!@̴ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcB0**BD^ T&  <T!@D^ $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll.L**B nT T&  <T!@ nT\ 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll&**0Bug T&  <T!@ug BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B~ T&  <T!@~8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll&**BQ T&  <T!@Q08 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0Bs T&  <T!@sPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B?Y T&  <T!@?YPt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll&**B޵ T&  <T!@޵P  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0BtdB T&  <T!@tdBP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B^2 T&  <T!@^2P$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll&**B郋k T&  <T!@郋kPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0Bs T&  <T!@sPt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B T&  <T!@P\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll&**Bی  T&  <T!@ی P(8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll&**0Br2 T&  <T!@r2PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B9 T&  <T!@9PP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll&**Blo9 T&  <T!@lo9PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0B" T&  <T!@"Pp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B$W T&  <T!@$WP$ | BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll&**B# T&  <T!@#P, BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dll&**0B*  T&  <T!@* P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B u- T&  <T!@ u-P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**Bx6 T&  <T!@x6P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0Bp`K T&  <T!@p`KPpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B T&  <T!@PD | BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll&**B  T&  <T!@ Pd BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0B[2 T&  <T!@[2P$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B Sc T&  <T!@ ScP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**B: T&  <T!@:PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0B T&  <T!@PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B2 T&  <T!@2Pt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**BcP T&  <T!@cPP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0Bo2c T&  <T!@o2cP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B"" T&  <T!@""Phh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dll&**B_z3 T&  <T!@_z3P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0B T&  <T!@Pd BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**BG{ T&  <T!@G{Pp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll&**Bz T&  <T!@zPt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0Bʀ| T&  <T!@ʀ|P< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**B[c< T&  <T!@[c<PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**B*[g T&  <T!@*[gP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0B\P| T&  <T!@\P| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllT&0**BD T&  <T!@D| d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll& T&  <T@ ; BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkBwBBwB'k7 =n WfK ? MF &0**B ; T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@ ; BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**0BU"/ T&  <T!@U"/BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B\? T&  <T!@\? $ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**Bn T&  <T!@n BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B{ T&  <T!@{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B\F T&  <T!@\F BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll** BG T&  <T!@G  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0 BĔ T&  <T!@Ĕ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** BU  T&  <T!@U  0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll** B>*3 T&  <T!@>*3d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0 BӳG T&  <T!@ӳG BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BLq T&  <T!@LqBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**B82 T&  <T!@82d  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Bgk T&  <T!@gkDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BC/a T&  <T!@C/aXBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Bh T&  <T!@hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B\/ T&  <T!@\/$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B|! T&  <T!@|!d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**BAEM T&  <T!@AEM BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B` T&  <T!@`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B|$ T&  <T!@|$ 0(( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**BJg T&  <T!@Jg 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Bw T&  <T!@w 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BLw T&  <T!@Lw 0T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll**Bij T&  <T!@ij 0P4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B T&  <T!@ 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll3B0**B+ T&  <T!@+ 0DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll4B**Bq T&  <T!@q 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll5B**0BKUx T&  <T!@KUx 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll6B0** Bs; T&  <T!@s; 0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll7B**!B` T&  <T!@` 0!BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll8B**0"B'(Z+ T&  <T!@'(Z+ 0 "BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll9B0**#BRՐ T&  <T!@RՐ 0 #BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll:B**$Bnj T&  <T!@nj 0t $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll;B**0%B, T&  <T!@, 0 %BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllB**0(B T&  <T!@,8(BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll?B0**)B[W T&  <T!@[W,`)BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll@B***B֏7 T&  <T!@֏7,*BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAB**0+B3C T&  <T!@3C,+BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllBB0**,B T&  <T!@,x ,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllCB**-Bb T&  <T!@b, -BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllDB**0.Bo T&  <T!@o,T .BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllEB0**/BnL\ T&  <T!@nL\,T8 /BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllFB**0BJK> T&  <T!@JK>, P 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllGB**01Bv T&  <T!@v,t1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHB0**2BLj T&  <T!@Lj,2BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIB**03Bo?_ T&  <T!@o?_,0 3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**4Bo T&  <T!@o,4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllKB**5B) T&  <T!@),8 5BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllLB**06B! T&  <T!@!,x6BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**7Bnw| T&  <T!@nw|, 7BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNB**8B c T&  <T!@ c, 8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllOB**09B T&  <T!@, 9BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**:BB& T&  <T!@B&,T:BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllQB**;Bxb T&  <T!@xb,;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllRB**0BR; T&  <T!@R;, >BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllUB**0?Bo' T&  <T!@o',?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**@BpŒ T&  <T!@pŒ,4@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllWB**AB T&  <T!@, ABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllXB**0BB-q T&  <T!@-q,t BBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**CB G> T&  <T!@ G>, PCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllZB**DBδx T&  <T!@δx,T DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll[B**0EBh7 T&  <T!@h7,EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**FB T&  <T!@, FBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll]B**GB: T&  <T!@:,GBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll^B**0HBb@ T&  <T!@b@,4HBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IBVn T&  <T!@VnPIBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll`B**JBSq] T&  <T!@Sq]P@ JBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllaB**0KB T&  <T!@PPKBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**LBW T&  <T!@WP@ LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllcB**MB~+ T&  <T!@~+P$MBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll.L**0NB;  T&  <T!@; P NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**OB  T&  <T!@ POBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**PBD T&  <T!@DP PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0QBX T&  <T!@XPQBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RBGX T&  <T!@GXP RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**SB T&  <T!@Pt SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll&**0TB1R  T&  <T!@1R PTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**UBEo T&  <T!@EoPUBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**VB T&  <T!@P$T VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll&**0WB% T&  <T!@%PlWBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**XB^# T&  <T!@^#Px XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll&**YB*ww\ T&  <T!@*ww\PYBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0ZB>?p T&  <T!@>?pPZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**[Bb T&  <T!@bP[BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**\BGF T&  <T!@GFP \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0]Ba# T&  <T!@a#P]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**^Ba! T&  <T!@a!PX ^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**_B T&  <T!@P _BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0`B. T&  <T!@.P`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**aB: T&  <T!@:P aBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**bBmmsv T&  <T!@mmsvPbBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0cBhn T&  <T!@hnPcBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**dBft T&  <T!@ftPdBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**eB"'  T&  <T!@"' PeBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0fB@<  T&  <T!@@< P fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**gBR  T&  <T!@R PgBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**hB  T&  <T!@ P hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0iBS  T&  <T!@S P,iBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**jB7S  T&  <T!@7S P jBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**kBa[  T&  <T!@a[ P kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0lBf  T&  <T!@f P lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**mBK  T&  <T!@K P TmBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**nBB=@  T&  <T!@B=@ P nBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&**0oBAT  T&  <T!@AT P oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**pB  T&  <T!@ PT pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll&**qB/.  T&  <T!@/. PT  qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dll&**0rB@  T&  <T!@@ P rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**sBߌ>k  T&  <T!@ߌ>k PsBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**tBY&  T&  <T!@Y& P tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**0uB<]  T&  <T!@<] P uBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**vB p  T&  <T!@ p PvBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&**wB^X  T&  <T!@^X PwBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll& T&  <T@B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMIG[Id .f3 ClientMachine _User 2?ClientProcessId &} Component &$g Operation (QJ ResultCode .xb PossibleCause N{349CC6FD-4C71-4DE8-B9F4-EBA3DF2B218E}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**BGXI T&  <T!@GXICCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{DEE82C84-64CF-41AD-9DBD-791670F35C28}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownN3**BGXI T&  <T!@GXICCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{D0173687-7C19-446C-8209-16807C2D7ADF}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**BmI T&  <T!@mICCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{E42AF822-0089-4EDF-A322-CA1C2377E9E2}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownro**BpI T&  <T!@pICChBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{68B4AA01-641A-46B2-B018-BEC488636FCF}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownow**BɁrI T&  <T!@ɁrICCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{5779BA1D-2940-412A-9241-A69988F8EF68}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**BŨyI T&  <T!@ŨyICCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational iN{4AD3EC83-B661-4D09-A47B-7A447AC79DE3}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownOp**B7|S T&  <T!@7|SCC\ l BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfClass.dlla**B=-T T&  <T!@=-TCC\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe\ %systemroot%\system32\wbem\wmiprov.dllp**B~k T&  <T!@~kCCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllWin** BDk T&  <T!@DkCCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllWMI **B o T&  <T!@ oCCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**BF T&  <T!@FCC,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**0Bl( T&  <T!@l(CCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**B 7 T&  <T!@ 7CCl BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllWMI**B?-q T&  <T!@?-qCC @ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0BZ T&  <T!@Z/BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**B! T&  <T!@!/ tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**B }- T&  <T!@ }-/T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllcro**0Bmy8 T&  <T!@my8/ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**B T&  <T!@/p4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllvit**B> T&  <T!@>/ t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0B J T&  <T!@ J/tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**BڬiU T&  <T!@ڬiU/ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**B[ T&  <T!@[/xX BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllWin**0B T&  <T!@/ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**B@H T&  <T!@@H/ T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**Ba< T&  <T!@a</X BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0B3P T&  <T!@3P/0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**Br T&  <T!@rP `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**BA T&  <T!@AP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0B T&  <T!@P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**B*v T&  <T!@*vP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**B] T&  <T!@]P ( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0BV T&  <T!@VPl BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**B; T&  <T!@;0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**BAT T&  <T!@AT0 T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0Bhi T&  <T!@hi0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**Ba7 T&  <T!@a70T TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllrat**B?W T&  <T!@?W0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0Bq=< T&  <T!@q=<0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**B] T&  <T!@]0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**B~C T&  <T!@~C0T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllvit**0B  T&  <T!@ 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**BF@;3 T&  <T!@F@;30 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**BSm T&  <T!@Sm0X tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllvit**0BQށ T&  <T!@Qށ0,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**B{ T&  <T!@{  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**B 1"  T&  <T!@ 1"   BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0B4 T&  <T!@4,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**BZ1 T&  <T!@Z1 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**B T&  <T!@TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllvit**0B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**BtM T&  <T!@tM\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe\ %systemroot%\system32\wbem\wmiprov.dllt**Bt[ T&  <T!@t[x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllvit**BH( T&  <T!@H(TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllWin**0BeW T&  <T!@eWBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**BC3 T&  <T!@C3 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**B8 T&  <T!@8 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWin**0B )M T&  <T!@ )MBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**B6_ T&  <T!@6_PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**B"j T&  <T!@"jBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllivit0**B5c T&  <T!@5c0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0 C:\Windows\System32\wbem\WmiPerfInst.dllvit**Bo# T&  <T!@o#t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWin**0B'Ͳ T&  <T!@'ͲBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**BdF T&  <T!@dFx BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllrat**B7Q T&  <T!@7QTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0B2Je T&  <T!@2Jex BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**Bx T&  <T!@x pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**BD T&  <T!@DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0BU%s T&  <T!@U%sBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**B} T&  <T!@} DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**B5ȶ T&  <T!@5ȶtBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllWMI**0BF T&  <T!@F BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerat0**B> T&  <T!@> BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**Bԧr T&  <T!@ԧr\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllWMI**0B%~ T&  <T!@%~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**Bʺ T&  <T!@ʺDl BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll 00**Bli T&  <T!@litBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllvit**0B0 T&  <T!@0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**BMb T&  <T!@MbP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll 00**BOH: T&  <T!@OH:BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvit**0BӼ T&  <T!@ӼBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**BH T&  <T!@HP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**Bnя T&  <T!@nяPPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllvit**0B T&  <T!@P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll 000**Be T&  <T!@eP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**BY4  T&  <T!@Y4 P lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllvit**0B bI  T&  <T!@ bI P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B2  T&  <T!@2 P D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**BF  T&  <T!@F P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**0BMG4  T&  <T!@MG4 P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BU}`! T&  <T!@U}`!P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B ! T&  <T!@ !PD BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllrat**0BV! T&  <T!@V!Pt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllB0**B#" T&  <T!@#"PDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrat**BJLM" T&  <T!@JLM"P  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**0B2a" T&  <T!@2a"Pt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllB0**B60" T&  <T!@60"P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrat**B0# T&  <T!@0#P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll 00**0BE# T&  <T!@E#PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllFWi0**BYz# T&  <T!@Yz#PLBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll 00**Bm# T&  <T!@m#P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0Bf# T&  <T!@f#P| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllv20**BK+$ T&  <T!@K+$PT` BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllat**Bs$ T&  <T!@s$P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllN  <Tonal 00000l ElfChnkB^BB^B $]\=n WfK ? MF &0**BSqMz$ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@SqMz$P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**B"$ T&  <T!@"$P lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B 2% T&  <T!@ 2%P PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0Bã#-% T&  <T!@ã#-%PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B% T&  <T!@%P p BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****Bp% T&  <T!@p% 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll~B**0B{% T&  <T!@{% 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BjN& T&  <T!@jN& 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllId**B8~& T&  <T!@8~& 0T LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeT C:\Windows\System32\wbem\WmiPerfInst.dllbe**0BȒ& T&  <T!@Ȓ& 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlli0**B̆' T&  <T!@̆' 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B1' T&  <T!@1' 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllare**0BDɚE' T&  <T!@DɚE' 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllAPP-0**Bo㏬' T&  <T!@o㏬'Pp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllcro**BA' T&  <T!@A'P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0Bm' T&  <T!@m'Pt BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllsoft0**Bno]( T&  <T!@no](P xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll4AD**B⸖( T&  <T!@⸖(PpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll**0BOw@( T&  <T!@Ow@(P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**B@k_) T&  <T!@@k_)PX BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllI-A**BϬTW) T&  <T!@ϬTW)P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0B^) T&  <T!@^)P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B) T&  <T!@)P`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll#F**BT) T&  <T!@T)P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0B* T&  <T!@*P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B5v* T&  <T!@5v*P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**B:%* T&  <T!@:%*P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0Bs* T&  <T!@s*PTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B=H++ T&  <T!@=H++P p BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**Ba+ T&  <T!@a+PpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dll#F**0Bv+ T&  <T!@v+P`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0** B + T&  <T!@ +P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F** B, T&  <T!@,P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0 Br9\), T&  <T!@r9\),P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0** Bٛ, T&  <T!@ٛ,PP h BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll#F** B], T&  <T!@],P4l BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll#F**0B-, T&  <T!@-,P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**Bs,B- T&  <T!@s,B-Pt tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll#F**B`}z- T&  <T!@`}z-PxBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll#F**0B+vV- T&  <T!@+vV-0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B1- T&  <T!@1-0xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll#F**B;. T&  <T!@;.0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0B B. T&  <T!@ B.0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B،. T&  <T!@،.0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**B. T&  <T!@.0TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0B2. T&  <T!@2.0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B?fY/ T&  <T!@?fY/0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**Bkc/ T&  <T!@kc/0 , BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0Bu/ T&  <T!@u/0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B 0 T&  <T!@ 00 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**B1 E0 T&  <T!@1 E0PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0B2JZ0 T&  <T!@2JZ0PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B1W0 T&  <T!@1W0Ph BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**Bp/0 T&  <T!@p/0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0 BI 1 T&  <T!@I 1P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**!Br"q1 T&  <T!@r"q1P H!BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**"B!~1 T&  <T!@!~1P "BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0#Bz1 T&  <T!@z1P #BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**$By$2 T&  <T!@y$2Pt $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll#F**%BL2^2 T&  <T!@L2^2PH%BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll#F**0&BUqr2 T&  <T!@Uqr2P &BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**'BWf 2 T&  <T!@Wf 2P 'BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**(Bdo3 T&  <T!@do3P  (BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0)B%3 T&  <T!@%3P )BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0***B43 T&  <T!@43P *BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**+B3 T&  <T!@3P +BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**0,Bd3 T&  <T!@d3P,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**-B?4 T&  <T!@?4P -BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**.B v4 T&  <T!@ v4PT .BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllcro**0/B֖74 T&  <T!@֖74P /BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**0B8.54 T&  <T!@8.54P p0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**1B1J)5 T&  <T!@1J)5P 1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**02BF >5 T&  <T!@F >5P 2BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**3B;5 T&  <T!@;5P L 3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**4BxV5 T&  <T!@xV5P L 4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**05BD5 T&  <T!@D5P5BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**6B>GW6 T&  <T!@>GW6P6BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**7B$6 T&  <T!@$6P 7BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**08B,n6 T&  <T!@,n6Pl 8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**9BU< 7 T&  <T!@U< 7Px 9BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllcro**:BoA7 T&  <T!@oA7P :BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**0;BVV7 T&  <T!@VV7P ;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**B+ 8 T&  <T!@+ 8Pt >BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllWMI**?Bzq8 T&  <T!@zq8P ?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**@B*/8 T&  <T!@*/8KP @BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0AB~.8 T&  <T!@~.8KP ABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**BB7"9 T&  <T!@7"9KP BBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllcro**CBiuZ9 T&  <T!@iuZ9KPx CBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllcro**0DBRn9 T&  <T!@Rn9KPDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**EB9 T&  <T!@9KPX EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllcro**FB= : T&  <T!@= :KPl FBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllcro**0GB !: T&  <T!@ !:KP GBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**0HB #: T&  <T!@ #:KPl HBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**IB": T&  <T!@":KP`IBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**JBG; T&  <T!@G;KPJBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**KBj; T&  <T!@j;KPh hKBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dllcro**0LB:M; T&  <T!@:M;KP LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**MB; T&  <T!@;KPMBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**NBUF< T&  <T!@UF<KP  NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0OBZ< T&  <T!@Z<KPOBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**PBX:< T&  <T!@X:<KP PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**QB;< T&  <T!@;<x QBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllcro**0RB( = T&  <T!@( =@RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**SByt`= T&  <T!@yt`= SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWMI**TB˫= T&  <T!@˫=P TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllcro**0UB{Ŀ= T&  <T!@{Ŀ= UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**VB7 +> T&  <T!@7 +>8 VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllWMI**WB}a> T&  <T!@}a>, X WBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllcro**0XBګr> T&  <T!@ګr> XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**YB> T&  <T!@>| YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllWMI**ZBxf? T&  <T!@xf?\ T ZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllcro**0[Bs%? T&  <T!@s%? [BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0**\B*j? T&  <T!@*j?`\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWMI**]Bj? T&  <T!@j?< ]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllcro**0^B\9? T&  <T!@\9? ^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-WMI0ctivity/Oper T&  <Tvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllN  <Tonal 00000l ElfChnk_BB_BBhxK_t=n WfK ? MF &0**_B`@ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@`@ h _BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\t**`BJ T&  <T!@g|>JP $BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B, UJ T&  <T!@, UJP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**BJjJ T&  <T!@JjJPH,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll\ts**BCJ T&  <T!@CJP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0BbK T&  <T!@bKPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**BrJK T&  <T!@rJKP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**BEK T&  <T!@EKP\ X BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0Be6K T&  <T!@e6KP( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**BF L T&  <T!@F LP@ TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**Bv@WL T&  <T!@v@WLPp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0BFkL T&  <T!@FkLP( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B9ǰL T&  <T!@9ǰLP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**B=J M T&  <T!@=J MP|l BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0BoM T&  <T!@oMP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B\LbM T&  <T!@\LbMP`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\tsN T&  <T!@NP#* OBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**PBm T&  <T!@mP#* PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**0QBd T&  <T!@dP#* QBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**RBq e T&  <T!@q eP#*xRBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**SBj  T&  <T!@j P#*xSBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0TB4 T&  <T!@4P#* TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**UBZ T&  <T!@ZP#* UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0VB T&  <T!@P#*|VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**WB f T&  <T!@ fP#*\ WBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe\ %systemroot%\system32\wbem\wmiprov.dllW**XBoMu T&  <T!@oMuP#*pXBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exepC:\Windows\System32\wbem\WmiPerfInst.dllt-W**0YBO T&  <T!@OP#* YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**ZBۣ T&  <T!@ۣ0 P ZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0[BOV T&  <T!@OVP#* [BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**\B̦ T&  <T!@̦P#*8 \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllt-W**]B+ T&  <T!@+P#*8 ]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0^B?1 T&  <T!@?1P#*^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**_B4 T&  <T!@4P#*d _BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**`B= T&  <T!@=P#*d `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0aB T&  <T!@P#* aBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**bB} T&  <T!@}P#*\ 4bBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe\ %systemroot%\system32\wbem\wmiprov.dllW**0cB8 2 T&  <T!@8 2P#*@cBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**dB" T&  <T!@"P#*D dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dlltiv**eBq T&  <T!@qP#*TeBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**fB&& T&  <T!@&&P#*fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**0gBy; T&  <T!@y;P#*gBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**hB T&  <T!@P#*8hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllt-W**iBI٩ T&  <T!@I٩P#*, x iBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0jBpZ T&  <T!@pZP#*@jBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**kBSI T&  <T!@SIP#*|kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dlls-W**lB' T&  <T!@'P#*@ lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0mBr2 T&  <T!@r2P#* mBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**nBb  T&  <T!@b P#*TnBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dlls-W**oB`I> T&  <T!@`I>P#* \oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0pB {S T&  <T!@ {SP#*@pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**qB  T&  <T!@ P#*< qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dlls-W**rB T&  <T!@P#* P rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0sBM T&  <T!@MP#*@ sBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**tB=b T&  <T!@=bP#*  tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**uB  T&  <T!@ P#* uBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0vB+  T&  <T!@+ P#*@ vBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**wBkD T&  <T!@kDP#*XwBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dlltiv**xB,_Lf T&  <T!@,_LfP#*L xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0yBk T&  <T!@kP#* yBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**zB7JAȭ T&  <T!@7JAȭP#* zBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**{B 6  T&  <T!@ 6 P#*| {BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0|B8  T&  <T!@8 P#*|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllctiv0**}BpR{ T&  <T!@pR{P#* }BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt-W**~Bn T&  <T!@nPh ~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0BѮ T&  <T!@ѮP\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B{, T&  <T!@{,P < BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**Bƕo T&  <T!@ƕoP0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0Bʹi T&  <T!@ʹiPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**Bun T&  <T!@unPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**B3" T&  <T!@3"P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0B<7 T&  <T!@<7PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B2X5 T&  <T!@2X5PpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**B-հ T&  <T!@-հP8 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0B  T&  <T!@ PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B} P T&  <T!@} PP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlls-W-Activity T&  <Ton@nP `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000R00000l ElfChnkBBBBU k;=n WfK ? MF &0**Bn T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@nP `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0B ߜ T&  <T!@ ߜP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**B.) T&  <T!@.)P`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllt**Be J T&  <T!@e JP|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BUO T&  <T!@UOPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllvit0**Bn T&  <T!@nPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**Bh T&  <T!@h  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B| T&  <T!@| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**B[q^ T&  <T!@[q^ P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllpro**B Ԡ T&  <T!@ Ԡ  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0BhX T&  <T!@hX TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**B T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**BDS T&  <T!@DS P@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllst.**0BA+h T&  <T!@A+h  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**BҴ T&  <T!@Ҵ  xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**B T&  <T!@  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0BE T&  <T!@E BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**Bcw T&  <T!@cw  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**B'kE T&  <T!@'kE  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0B͵ T&  <T!@͵ h BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlll0**BR) T&  <T!@R) d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Bl T&  <T!@l 4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B]g T&  <T!@]g t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloso0**BOݶ T&  <T!@Oݶ  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**B- T&  <T!@-P#*lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BDq3 T&  <T!@Dq3P#*dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloso0**B T&  <T!@P#*tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlloso**Biѷ T&  <T!@iѷP#*\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BD T&  <T!@DP#*TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlloso0**BbsA T&  <T!@bsAP#*t  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dlloso**B T&  <T!@P#* BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B T&  <T!@P#*XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll5B0**Bvt T&  <T!@vtP#* BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll6B**Bhh7 T&  <T!@hh7P#*h @BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeh C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0BXK T&  <T!@XKP#* BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll8B0**BY]궹 T&  <T!@Y]궹P#*0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll9B**B0k׹ T&  <T!@0k׹P{Q{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Nwfascimwmiprvse.exe%systemroot%\system32\wbem\wfascim.dlls**B*A; T&  <T!@*A;P{Q{8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0Bq T&  <T!@qP{Q{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls-W0**B_Y T&  <T!@_YP{Q{ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**BT  T&  <T!@T P{Q{ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B] T&  <T!@]P{Q{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dlls-W0**B  T&  <T!@ P{Q{ 4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**BO T&  <T!@OP{Q{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllpro**0Bbd T&  <T!@bd BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllBB0**B T&  <T!@P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dlli.d**BX~ T&  <T!@X~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0B1 T&  <T!@1 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllEB0**B&r T&  <T!@&r PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**BDɍ T&  <T!@DɍxBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0B ʼ T&  <T!@ ʼpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllHB0**B?& T&  <T!@?&0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**BNSRh T&  <T!@NSRh0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0BSw| T&  <T!@Sw|0dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllKB0**Bڽ T&  <T!@ڽ0L BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dlli.d**Bf  T&  <T!@f 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllW**0B"/ T&  <T!@"/0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bb)9 T&  <T!@b)90 P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**Bx ξ T&  <T!@x ξ0lh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllt-W**0B~ T&  <T!@~0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B? T&  <T!@?04 |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dlltiv**ByeԀ T&  <T!@yeԀ0 t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllt-W**0BQ T&  <T!@Q BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BG{ T&  <T!@G{, BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**BQ3 T&  <T!@Q3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlls-W**0Bu$H T&  <T!@u$H BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**Bj- T&  <T!@j-P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllXB**BB T&  <T!@BP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllYB**0B{ T&  <T!@{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZB0**BpnV T&  <T!@pnV BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll[B**BQA T&  <T!@QA BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0Bǭ T&  <T!@ǭlBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll]B0**B.  T&  <T!@. Hp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll^B**BL T&  <T!@L BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0B` T&  <T!@` BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll`B0**B7 T&  <T!@70TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllaB**B T&  <T!@pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0BKtm T&  <T!@KtmBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B} T&  <T!@} @ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**Bñ T&  <T!@ñ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0BL@ T&  <T!@L@LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BJ4! T&  <T!@J4!&0 lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B,Bh. T&  <T!@h.>BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**?B9r T&  <T!@9rd x ?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dlls-W**0@B2 T&  <T!@2 @BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**AB  T&  <T!@ HD ABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllXB**BB$ T&  <T!@$| BBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllYB**0CB)9 T&  <T!@)9CBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllZB0**DB&% T&  <T!@&% DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll[B**EBa|H T&  <T!@a|H EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0FBӊ T&  <T!@ӊ FBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll]B0**GBhIO T&  <T!@hIO GBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll^B**HB)  T&  <T!@) D HBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dlli.d**0IB] T&  <T!@]xIBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll`B0**JB{ T&  <T!@{8 JBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllaB**KBm>J T&  <T!@m>J KBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlli.d**0LBFAyQ T&  <T!@FAyQh LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**MB T&  <T!@xMBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dlltiv**NB T&  <T!@NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dlltiv**0OB:P T&  <T!@:POBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**PB=_ T&  <T!@=_ PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**QBK T&  <T!@K QBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlltiv**0RB'  T&  <T!@' RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**SB|x T&  <T!@|x  SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**TBgU T&  <T!@gU TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0UBsi T&  <T!@si UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**(VBa# T&  <T!@a#\VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000,TServerFeatureProviderwmiprvse.exe%windir%\system32\wbem\servercompprov.dll$(**HWBl* T&  <T!@l*WBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000&deploymentproviderwmiprvse.exe%systemroot%\system32\wbem\ServerManager.DeploymentProvider.dllH**XB T&  <T!@@`hZ1IV0XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**YB3 T&  <T!@3@`hZ1IV0 YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0ZBK T&  <T!@KZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**[Byاx T&  <T!@yاx[BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**\B9a T&  <T!@9a@\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0]B T&  <T!@]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**^B[!* T&  <T!@[!* p^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**_Bm T&  <T!@mD _BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll**0`B9i T&  <T!@9i$`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**aBg> T&  <T!@g>D aBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll**bB6{n. T&  <T!@6{n. bBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0cB=5 T&  <T!@=5$cBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**dBkƐ T&  <T!@kƐ dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**eBŒ T&  <T!@Œ0D eBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0fB T&  <T!@0fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**gB%C T&  <T!@%C0  gBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**hBg T&  <T!@g0p hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll**0iB  T&  <T!@ 0|iBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**jB T&  <T!@0jBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**kB9.9 T&  <T!@9.90l kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0lBfM T&  <T!@fM lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**mBl  T&  <T!@l `T mBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dll**nB5 T&  <T!@5\nBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0oBpW T&  <T!@pW<oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**pB7,Q\ T&  <T!@7,Q\ppBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**qB?ٞ T&  <T!@?ٞqBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0rBqX T&  <T!@qX,rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**sBF  T&  <T!@F DsBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll T&  <T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000l ElfChnktBBtBBS?*=n WfK ? MF &0**tBأQ T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@أQTtBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dll**0uBo+f T&  <T!@o+fuBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**vB4׸ T&  <T!@4׸,l vBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllB**wB, T&  <T!@, ( wBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0xB= T&  <T!@=8xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**yB:s T&  <T!@:s yBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**zBG T&  <T!@G\|zBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllB**0{B T&  <T!@{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**|B!' T&  <T!@!' |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**}Bjj T&  <T!@jj$ }BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll B**0~B~ T&  <T!@~~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B( T&  <T!@(t tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dll B**BR T&  <T!@RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**0BBu1 T&  <T!@Bu1 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B"_  T&  <T!@"_ 0$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**B{] T&  <T!@{]0l BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllB**0B}G T&  <T!@}G0h BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B%cL? T&  <T!@%cL?0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**B│ T&  <T!@│0T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0B f T&  <T!@ f0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B_ T&  <T!@_0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**B:5 T&  <T!@:50| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0BChI T&  <T!@ChI0xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BkΤ T&  <T!@kΤ0Dh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllB**B7z T&  <T!@7z0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0B5 T&  <T!@508BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**ByvW T&  <T!@yvW0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**Bޙ$ T&  <T!@ޙ$0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0B+ T&  <T!@+BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B T2  T&  <T!@ T2 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**BVQO T&  <T!@VQOBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0B1db T&  <T!@1db, BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bc T&  <T!@c@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll B**BB**B ? T&  <T!@ ?0D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dll?B**0BT~ T&  <T!@T~H BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B<9k T&  <T!@<9kpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAB**B T&  <T!@T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllBB**0Bv> T&  <T!@v> BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B5  T&  <T!@5 0|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllDB**Bb T&  <T!@b BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllEB**0Bw T&  <T!@w|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BF T&  <T!@F BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllGB**BIX T&  <T!@IX@ \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllHB**0B\) T&  <T!@\) BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B!Ԅ T&  <T!@!Ԅ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllJB**B)0 T&  <T!@)0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllKB**0B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BF T&  <T!@FDTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllMB**BXz T&  <T!@Xz BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllNB**0BX# T&  <T!@X#BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllPB**Bd- T&  <T!@d- dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllQB**0B4\B T&  <T!@4\BBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B񞢞 T&  <T!@񞢞 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllSB**B6J T&  <T!@6J BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllTB**0BM/ T&  <T!@M/BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B SP T&  <T!@ SP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVB**B̤ T&  <T!@̤ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlll**0B0 T&  <T!@0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllymen0**BO T&  <T!@OBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**B?O T&  <T!@?O BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0BjZ T&  <T!@jZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**B= T&  <T!@=BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**B' T&  <T!@' BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B  T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**BKnh T&  <T!@Knh| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllmiP**B} T&  <T!@}h BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0By T&  <T!@y4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**BD* T&  <T!@D*| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllmiP**B^ T&  <T!@^ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0BUs T&  <T!@UsBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**B T&  <T!@0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**B  T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B& T&  <T!@&BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**Bo i T&  <T!@o i D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0Bse T&  <T!@seBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**B46 T&  <T!@46, hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllmiP**B[ T&  <T!@[DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**Bh T&  <T!@hp tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllmiP**Bt* T&  <T!@t* BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B>> T&  <T!@>>BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**BJt T&  <T!@JtBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**BGh T&  <T!@Gh `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0B*f T&  <T!@*fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**B.L T&  <T!@.LD@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllmiPfInst.dll T&  <T@?U BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ElfChnkB]BB]B5C'=n WfK ? MF &0**B?U T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@?U BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**0B;D T&  <T!@;D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**BcmX  T&  <T!@cmX  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**BHB T&  <T!@HB BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0BR W T&  <T!@R W| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bű T&  <T!@űBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**B/-Y T&  <T!@/-Y,4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllB**0B<  T&  <T!@<  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bf T&  <T!@f BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**B2 T&  <T!@2 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**0B T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bn  T&  <T!@n xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll B**B h T&  <T!@ h BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**0B0o T&  <T!@0o BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BTw T&  <T!@Tw| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllB**B/ T&  <T!@/,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dllB**0BV" T&  <T!@V"@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bh~ T&  <T!@h~(BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dllB**BW T&  <T!@W xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0BH' T&  <T!@H'BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bs4 T&  <T!@s4DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllB**BG6u T&  <T!@G6ux D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllB**0B; T&  <T!@;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bt T&  <T!@tD  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeD C:\Windows\System32\wbem\WmiPerfInst.dllB**BG& T&  <T!@G&l8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exelC:\Windows\System32\wbem\WmiPerfInst.dllB**0B: T&  <T!@: BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B38 T&  <T!@38 P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**B T&  <T!@  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0BK T&  <T!@K0h BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B4 H  T&  <T!@4 H 0<BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dllB**BN  T&  <T!@N 0 D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0B'up  T&  <T!@'up 0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** BPLu  T&  <T!@PLu 0D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll B** B(L  T&  <T!@(L 04  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dll!B**0 BDS  T&  <T!@DS 0P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll"B0** B  T&  <T!@ 04 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#B** Bw  T&  <T!@w 0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$B**0B   T&  <T!@  0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bva  T&  <T!@va \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll&B**B,Yg  T&  <T!@,Yg  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll'B**0B  T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bd  T&  <T!@d P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll)B**B*eFW  T&  <T!@*eFW  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll*B**0B k  T&  <T!@ k BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BӘ  T&  <T!@Ә P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll,B**B{  T&  <T!@{  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll-B**0B  T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bjy  T&  <T!@jy \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dll/B**B  T&  <T!@ $ |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll0B**0B.1a  T&  <T!@.1a @ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B, T&  <T!@,8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2B**B-o T&  <T!@-op BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll3B**0B|2 T&  <T!@|2@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B3= T&  <T!@3=,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll5B**B70 T&  <T!@70 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll6B**0 BRr7 T&  <T!@Rr7 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**!BB**(Bd : T&  <T!@d : D (BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll?B**0)B ~|O T&  <T!@ ~|Ot)BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0***B`Y T&  <T!@`Yx *BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllAB**+B f T&  <T!@ f +BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllBB**0,BN T&  <T!@N ,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**-B e T&  <T!@ e\ -BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllDB**.B^ T&  <T!@^@ .BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllEB**0/Bz  T&  <T!@z  /BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**0BK T&  <T!@KPP#*0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllGB**1B cS T&  <T!@ cSPP#*H 1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllHB**02B g T&  <T!@ gPP#*$2BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**3B<2 T&  <T!@<2$ 3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dllJB**4B T&  <T!@hX 4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllKB**05Bf, T&  <T!@f, 5BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**6Bv T&  <T!@vP <6BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllMB**7Bm T&  <T!@m4 7BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllNB**08Bأ T&  <T!@أ8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**9B1t' T&  <T!@1t'\ 9BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe\C:\Windows\System32\wbem\WmiPerfInst.dllPB**:B"ul T&  <T!@"ul`h:BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe`C:\Windows\System32\wbem\WmiPerfInst.dllQB**0;Bj T&  <T!@jT;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B<3 T&  <T!@<3>BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**?Bg T&  <T!@g ?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVB**@B T&  <T!@@ @BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dlll**0AB"T T&  <T!@"TxABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllymen0**BB x@ T&  <T!@ x@l BBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dllmiP**CB=] T&  <T!@=], |CBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0DB˱ T&  <T!@˱ DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**EB T&  <T!@ EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**FB*$7 T&  <T!@*$7 DFBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0GBK T&  <T!@K GBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**HB$T T&  <T!@$THBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**IB; T&  <T!@; IBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0JB< T&  <T!@<JBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**KB X T&  <T!@ X KBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**LBt9͜ T&  <T!@t9͜tLBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**0MB;Y T&  <T!@;Y MBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**NBp T&  <T!@p 4NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**OBO T&  <T!@O OBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**0PB,d T&  <T!@,dPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll2\ts0**QB( T&  <T!@( QBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**RBXo T&  <T!@XoRBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dlll**SB T&  <T!@SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BSppProviderwmiprvse.exe%SystemRoot%\System32\sppwmi.dllot%**0TBu T&  <T!@uTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllerfI0**UBݡ T&  <T!@ݡ UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0VB+ T&  <T!@+` VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcfgw0**WB#OE T&  <T!@#OEdWBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllrfI**XB#N T&  <T!@#Nt XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exet C:\Windows\System32\wbem\WmiPerfInst.dllrfI**0YB T&  <T!@` YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcfgw0**ZB% T&  <T!@%ZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**[BWj T&  <T!@Wj[BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllrfI**0\BF| T&  <T!@F| \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllcfgw0**]Bi T&  <T!@i ,]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllrfIt.dllmiP T&  <T@h^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000ational ElfChnk^BB^BB@vd=n WfK ? MF &0**^B T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@h^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0_Bt/ T&  <T!@t/_BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllMic0**`B T&  <T!@ `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**aBU T&  <T!@UxTaBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dllB**0bBcE T&  <T!@cEbBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**cB< T&  <T!@<DcBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dllB**dB.0 T&  <T!@.0P dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dllB**0eBr T&  <T!@r eBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**fBMK T&  <T!@MK fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**gB d3 T&  <T!@ d3$gBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**0hB G T&  <T!@ GxhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**iBY T&  <T!@Y iBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**jBm T&  <T!@mjBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**0kBR6 T&  <T!@R6 kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**lBe  T&  <T!@e 8 lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dllB**mBc  T&  <T!@c  mBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0nB"  T&  <T!@"  nBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**oB<% ! T&  <T!@<% ! oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**pB$jL! T&  <T!@$jL! pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0qBb`! T&  <T!@b`! qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**rB_! T&  <T!@_!p rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllB**sB! T&  <T!@!P#* sBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0tB5" T&  <T!@5"P#*DtBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**uB n" T&  <T!@ n"P#*hD uBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exehC:\Windows\System32\wbem\WmiPerfInst.dllB**vBPeq" T&  <T!@Peq"P#* $ vBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0wB" T&  <T!@"P#* wBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**xB# T&  <T!@#P#* xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**yB-e# T&  <T!@-e#P#*yBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0zB x# T&  <T!@ x#P#* zBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**{B# T&  <T!@#P#*, p{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe, C:\Windows\System32\wbem\WmiPerfInst.dllB**|B# $ T&  <T!@# $P#*Xx |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllB**0}BB**B/E+ T&  <T!@/E+ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll?B**0B+ T&  <T!@+ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bav6, T&  <T!@av6, BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllAB**B, T&  <T!@,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllBB**0Bއ, T&  <T!@އ,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BL/, T&  <T!@L/,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllDB**BM[+- T&  <T!@M[+- BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllEB**0B{c\@- T&  <T!@{c\@- BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B7#- T&  <T!@7#-BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllGB**B- T&  <T!@-x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllHB**0BC.- T&  <T!@C.-d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BP. T&  <T!@P. DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllJB**B8. T&  <T!@8.BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllKB**0B8. T&  <T!@8.BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B @6/ T&  <T!@ @6/|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMB**BEUD/ T&  <T!@EUD/|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllNB**0B:X/ T&  <T!@:X/ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B;GW/ T&  <T!@;GW/ ` BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllPB**B./ T&  <T!@./p BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dllQB**0B 0 T&  <T!@ 0TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B&e0 T&  <T!@&e0@ @ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dllSB**B70 T&  <T!@70BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllTB**0B6y0 T&  <T!@6y0TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BHb1 T&  <T!@Hb1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVB**0BJ`Jq1 T&  <T!@J`Jq1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B T&  <T!@y>lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B|]> T&  <T!@|]> BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**B> T&  <T!@>BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0B> T&  <T!@> BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B? T&  <T!@? 4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**B1U? T&  <T!@1U?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0BRi? T&  <T!@Ri?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B܃? T&  <T!@܃?,8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe,C:\Windows\System32\wbem\WmiPerfInst.dll B**B^@ T&  <T!@^@@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll!B**0B|@ T&  <T!@|@d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll"B0**B=u@ T&  <T!@=u@P BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeP C:\Windows\System32\wbem\WmiPerfInst.dll#B**B@ T&  <T!@@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll$B**0BNv`@ T&  <T!@Nv`@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bp-A T&  <T!@p-A\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&B**BgmA T&  <T!@gmAD|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll'B**0BHM3A T&  <T!@HM3A$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BlA T&  <T!@lA8 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dll)B**BMi B T&  <T!@Mi Bl BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exel C:\Windows\System32\wbem\WmiPerfInst.dll*B**0B5B T&  <T!@5B BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B=B T&  <T!@=BBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll,B**BݽVB T&  <T!@ݽVB @ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll-B**0B7B T&  <T!@7Bh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BAC T&  <T!@AC`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/B**BƳ-C T&  <T!@Ƴ-C BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll0B**0B窚C T&  <T!@窚Cx BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B C T&  <T!@ C BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2B**B8D T&  <T!@8D8 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8 C:\Windows\System32\wbem\WmiPerfInst.dll3B**0B||MD T&  <T!@||MD BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BYǦD T&  <T!@YǦDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll5B** BZ3D T&  <T!@Z3D< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe<C:\Windows\System32\wbem\WmiPerfInst.dll6B**0 BOLE T&  <T!@OLE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0** B&E T&  <T!@&EPhuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dll** B'pE T&  <T!@'pEb O!b BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32awmiprvse.exe%systemroot%\system32\wbem\wmipcima.dll** BWtE T&  <T!@WtEb O!b BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000Fsmbwmiv2wmiprvse.exe%SystemRoot%\System32\smbwmiv2.dll**(BNwE T&  <T!@NwEEE\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅEm>B3 ?+An g<Operation_ClientFailureoj3http://manifests.microsoft.com/win/2006/windows/WMI[Id .Ɔ3 ClientMachine _User 2?ClientProcessId &W} Component &g Operation (J ResultCode .xb PossibleCause N{DFE57D87-B519-4C8F-8357-66376ECA9665}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown(**ByE T&  <T!@yEEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅN{EB04E8A9-A132-479B-9851-01D60F453051}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownSy**ByE T&  <T!@yEEE\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅN{6ECB4B09-2D30-4483-A4C7-32F8CC5CEDFA}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownP**BE T&  <T!@EEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅN{A506BC7F-887A-48CB-A46D-E25823634D11}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownat**BaE T&  <T!@aEEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅN{1B983866-02BE-4243-B5A1-DC9D1549F784}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown**BaE T&  <T!@aEEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅN{9EB7DAA5-0F97-4B75-A60A-C0E9A5D3C750}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknown-W**BStE T&  <T!@StEEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational ɅN{2B059AB3-CAE7-4E30-B488-CF72B827190F}FILF-APP-RECProviderStart IWbemServices::ExecMethod - ROOT\Microsoft\Windows\Smb : MSFT_SmbShare::FireShareChangeEventUnknownC**B(E T&  <T!@(EEE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000TWmiPerfClasswmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dllr**B3@)E T&  <T!@3@)EEE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllr**BR~;AE T&  <T!@R~;AEEE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000PCIMWin32wmiprvse.exe%systemroot%\system32\wbem\cimwin32.dllWm** BBAE T&  <T!@BAEEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 0000JMS_NT_EVENTLOG_PROVIDERwmiprvse.exe%systemroot%\system32\wbem\ntevt.dllIN3 **BWZE T&  <T!@WZEEE< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dll**BE T&  <T!@EEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0BE T&  <T!@EEEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**B F T&  <T!@ FEE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B;PF T&  <T!@;PFEE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**0BfeF T&  <T!@feF@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWIN30**BXuF T&  <T!@XuF@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll** BG T&  <T!@G@t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**0!B9G T&  <T!@9G@!BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRMIN0**"B&G T&  <T!@&G@|"BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**#B,G T&  <T!@,G@( #BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dllWm**0$B$F G T&  <T!@$F G@$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRMIN0**%Bef%H T&  <T!@ef%H@%BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**&BgniH T&  <T!@gniH@&BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWm**0'BY}H T&  <T!@Y}H@L 'BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRMIN0**(BH T&  <T!@H@ (BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWm**)B\%I T&  <T!@\%I@ )BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllWm**0*B0I T&  <T!@0I@4 *BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllRMIN0**+BǵI T&  <T!@ǵIPhuh+BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllWM**,BvI T&  <T!@vIPhuh,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**0-BI T&  <T!@IPhuht-BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0**.B=P=J T&  <T!@=P=JPhuh  .BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**/BՁJ T&  <T!@ՁJPhuh/BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllIns**00BTJ T&  <T!@TJPhuhx0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0**1B܄zJ T&  <T!@܄zJPhuhd1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exedC:\Windows\System32\wbem\WmiPerfInst.dllVIC**2B^4K T&  <T!@^4KPhuh 2BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIns**03BN3IK T&  <T!@N3IKPhuh3BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0**4BK T&  <T!@KPhuh 4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllVIC**5BuK T&  <T!@uKPhuh T 5BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllIns**06BK T&  <T!@KPhuhx 6BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll.exe0**7BZ3cL T&  <T!@Z3cLPhuh 7BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllVIC**8B:L T&  <T!@:LPhuh48BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll**09B8L T&  <T!@8LPhuh9BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll:\Wi0**:B1]M T&  <T!@1]MPhuhX :BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dllv**;B#MM T&  <T!@#MMPhuh ;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**0BlM T&  <T!@lMPhuh >BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**0?BB=N T&  <T!@B=NPhuhd?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllov0**@BipN T&  <T!@ipNPhuh @BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmip**AB(N T&  <T!@(NPhuhtABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmip**0BBrN T&  <T!@rNPhuhBBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllov0**CBn"O T&  <T!@n"OPhuhCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllvse**DBeO T&  <T!@eOPhuh DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll  <T 000RaElfChnkEBBEBBBH0<=n WfK ? MF &0**EBzO T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <Tw!@zOPhuhTEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll**FB'1O T&  <T!@'1OPhuhFBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllMic**GB}aP T&  <T!@}aPPhuhd GBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0HB!,P T&  <T!@!,PPhuh$HBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**IBqP T&  <T!@qPPhuh IBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**JB2P T&  <T!@2PPhuh`JBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0KBVTP T&  <T!@VTP0$KBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**LBlFQ T&  <T!@lFQ0 LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**MBِ}Q T&  <T!@ِ}Q0MBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0NB_Q T&  <T!@_Q0$NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**OBY@Q T&  <T!@Y@QPhuhOBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**PBz=0R T&  <T!@z=0RPhuh ` PBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll B**0QBbER T&  <T!@bERPhuhQBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**RBSR T&  <T!@SRPhuh$ RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll**SBL.R T&  <T!@L.RPhuh4 SBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4 C:\Windows\System32\wbem\WmiPerfInst.dllB**0TBp3R T&  <T!@p3RPhuhTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**UB&RS T&  <T!@&RSPhuh UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**VBBHS T&  <T!@BHSPhuh HVBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0WBWS T&  <T!@WSPhuhWBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**XB jT T&  <T!@ jTPhuh 4XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**YBm!KIT T&  <T!@m!KITPhuh 8YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0ZBU^T T&  <T!@U^TPhuhZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**[B6[T T&  <T!@6[TPhuh [BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**\Bli T T&  <T!@li TPhuh \BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0]BlU T&  <T!@lUPhuh ]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**^B2;jU T&  <T!@2;jUPhuh^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**_BôU T&  <T!@ôUPhuhd_BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0`BlU T&  <T!@lUPhuh`BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**aB-V T&  <T!@-VP`aBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**bB+aV T&  <T!@+aVPbBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0cBnwV T&  <T!@nwVPcBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**dB+V T&  <T!@+VP dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**eB|W T&  <T!@|WP eBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll B**0fB *W T&  <T!@ *W40fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**gBbjW T&  <T!@bjW40TgBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll"B**hB fW T&  <T!@ fW40hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#B**0iBW T&  <T!@W40iBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**jB" 9X T&  <T!@" 9X40 TjBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**kBX T&  <T!@X40 kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll&B**0lBĬX T&  <T!@ĬX408lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**mB5wpX T&  <T!@5wpX40mBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**nB'6Y T&  <T!@'6Y40(nBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll)B**0oBʋCY T&  <T!@ʋCY40oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**pBe 7Y T&  <T!@e 7Y40pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**qB Y T&  <T!@ Y40@qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll,B**0rByY T&  <T!@yY40rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**sB@SQZ T&  <T!@@SQZ Phuh sBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**tBD͔Z T&  <T!@D͔Z PhuhD tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll/B**0uB9Z T&  <T!@9Z Phuh uBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**vB[ T&  <T!@[ Phuh vBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**wBZ E[ T&  <T!@Z E[ Phuhp wBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll2B**0xB [[ T&  <T!@ [[ Phuh xBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**yB7[ T&  <T!@7[ Phuh |yBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**zBCn[ T&  <T!@Cn[ Phuh` |zBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll5B**0{B} \ T&  <T!@} \ Phuhx{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**|B'3h\ T&  <T!@'3h\ Phuh |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**}BK5\ T&  <T!@K5\ Phuh}BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll****0~B\ T&  <T!@\ Phuh~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bf] T&  <T!@f] Phuh dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**Bik] T&  <T!@ik] PhuhXBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeXC:\Windows\System32\wbem\WmiPerfInst.dllId**0BRs] T&  <T!@Rs] PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllecM0**B] T&  <T!@] Phuhp BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exep C:\Windows\System32\wbem\WmiPerfInst.dll**B2^ T&  <T!@2^ Phuh( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe( C:\Windows\System32\wbem\WmiPerfInst.dll**0B@&^ T&  <T!@@&^ PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllhang0**B Q^ T&  <T!@ Q^ PhuhT(BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeTC:\Windows\System32\wbem\WmiPerfInst.dllPP-**B1^ T&  <T!@1^ Phuh L BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllcro**0BFK^ T&  <T!@FK^ Phuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BQ4_ T&  <T!@Q4_ Phuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dlloft**Biov_ T&  <T!@iov_ PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2B0**0Br_ T&  <T!@r_ PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllindo0**Bm_ T&  <T!@m_ Phuh< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllndo**BhB)` T&  <T!@hB)` Phuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllI-A**0B>` T&  <T!@>` PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllicro0**B` T&  <T!@` Phuh$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dll#F**B1` T&  <T!@1` Phuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**0B` T&  <T!@` PhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll-Win0**BGMa T&  <T!@GMa Phuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll#F**B^a T&  <T!@^a Phuh <BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**0BMkk T&  <T!@>Mkk&0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bek T&  <T!@ek&0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**BWl T&  <T!@Wl&0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0Byl T&  <T!@yl&0, BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BiK~l T&  <T!@iK~l&0d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll**B.l T&  <T!@.l&0t BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0B l T&  <T!@ l&0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B .m T&  <T!@ .m&0@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dll**Bnm T&  <T!@nm&0 ,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll B**0B:)m T&  <T!@:)m&0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BHKm T&  <T!@HKm&0  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll**B#n T&  <T!@#n&0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllB**0B7n T&  <T!@7n&0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bysn T&  <T!@ysn&0(x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe(C:\Windows\System32\wbem\WmiPerfInst.dll**BΜn T&  <T!@Μn&0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**0Bt:n T&  <T!@t:n&0| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BdxSo T&  <T!@dxSoDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Bko T&  <T!@ko4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dllB**0B㨜o T&  <T!@㨜oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bwo T&  <T!@wox BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll**B(:p T&  <T!@(:p8 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe8C:\Windows\System32\wbem\WmiPerfInst.dllB**0BCOp T&  <T!@COpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B&ݬp T&  <T!@&ݬp|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll**Bp T&  <T!@pBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**B?q T&  <T!@?q x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B΂q T&  <T!@΂q\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B$Mr T&  <T!@$MrBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllB**B-:Fr T&  <T!@-:Fr BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BsZr T&  <T!@sZr\ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B r T&  <T!@ rBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll B**B6+3r T&  <T!@6+3r  BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B s T&  <T!@ s BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll"B0**B7Xs T&  <T!@7XsX ` BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll#B**BXϫs T&  <T!@XϫsPhuhX ` BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B\s T&  <T!@\sPhuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B^'t T&  <T!@^'tPhuh 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll&B**B[^t T&  <T!@[^tPhuh| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B%/st T&  <T!@%/stPhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BY4t T&  <T!@Y4tPhuhD BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeDC:\Windows\System32\wbem\WmiPerfInst.dll)B**B9u T&  <T!@9uPhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B&u T&  <T!@&uPhuhTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**BJu T&  <T!@JuPhuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll,B**BV u T&  <T!@V uPhuhx BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BVKu T&  <T!@VKuPhuh4BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B6 ~Av T&  <T!@6 ~AvPhuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll/B**Bhwv T&  <T!@hwvPhuhBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BZv T&  <T!@ZvPhuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bqv T&  <T!@qvPhuh TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2B**BJ)w T&  <T!@J)wPhuh$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$ C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BqGy>w T&  <T!@qGy>wPhuh$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B4(w T&  <T!@4(wPhuhx BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll5B**Bo7w T&  <T!@o7wP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BELw T&  <T!@ELwP$ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**B=jex T&  <T!@=jexP BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll****BCx T&  <T!@CxP lBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0B' x T&  <T!@' xPdBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll0**Bq y T&  <T!@q yP| T BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe| C:\Windows\System32\wbem\WmiPerfInst.dllId**B T&  <T!@lS> Tuh BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\ts**0BÞ)S T&  <T!@Þ)S Tuhx BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B﹀ T&  <T!@﹀0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll#F**BvtO T&  <T!@vtO0 BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Bp T&  <T!@p0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**Bk(y T&  <T!@k(y0X BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll#F**B1F T&  <T!@1F0X BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeX C:\Windows\System32\wbem\WmiPerfInst.dll\ts**0Bfθ T&  <T!@fθ0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll#F0**B\8  T&  <T!@\8 0 8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll.**BX{- T&  <T!@X{-0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**BW T&  <T!@W0d BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exed C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0Bk T&  <T!@k0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0** BG7 ӂ T&  <T!@G7 ӂ0x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**!B  T&  <T!@ 0 X !BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0"B݉r T&  <T!@݉r0< "BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**#BKop T&  <T!@Kop0#BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**$BDd T&  <T!@Dd0$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0%BEу T&  <T!@Eу0 %BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**&BgC7 T&  <T!@gC70 &BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**'B?T} T&  <T!@?T}Pd'BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0(B T&  <T!@P (BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**)Bqc T&  <T!@qcPt)BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys***Bg" T&  <T!@g"P0x *BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0+B6 T&  <T!@6P +BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**,Btrٝ T&  <T!@trٝP ,BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**-B7Յ T&  <T!@7ՅP $ -BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0.B" T&  <T!@"P` .BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0l#F{Mic T&  <T@ RPX /BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal ElfChnk/BB/BBX~5=n WfK ? MF &0**/B R T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  <TY!@ RPX /BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 00000\M!kb]˒AW)-Operation_StartedOperationaloj3http://manifests.microsoft.com/win/2006/windows/WMI, < ProviderName K sCode *n HostProcess   , v# ProviderPath RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll\t**0BG T&  <T!@GPX 0BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**01B> T&  <T!@>P, 1BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllB0**2B7 T&  <T!@70 2BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dlls**3B׶v T&  <T!@׶v03BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**4B: T&  <T!@:04BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**05B`O T&  <T!@`O0 5BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**6Bk T&  <T!@k0 6BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**7B T&  <T!@0 7BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**08B3 T&  <T!@30, 8BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**9B7i T&  <T!@7i0 9BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**:BB- T&  <T!@B-Px :BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exexC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0;B T&  <T!@P ;BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**Bog T&  <T!@ogP>BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**?B͉ T&  <T!@͉P | ?BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**@B07 T&  <T!@07P|@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0AB0 T&  <T!@0P ABMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**BBM' T&  <T!@M'PDBBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**CB T&  <T!@PHCBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0DB|͊ T&  <T!@|͊PtDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**EB4 T&  <T!@4P EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**FB/k T&  <T!@/kPL HFBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0GBmO T&  <T!@mOPGBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dll\sys0**HB  T&  <T!@ P HBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**IB׎' T&  <T!@׎'P@ X IBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@ C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0JB3!3 T&  <T!@3!3P4JBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**KB,a T&  <T!@,aP KBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**LB oь T&  <T!@ oь` LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe` C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0MBĦ T&  <T!@ĦMBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**NB[L T&  <T!@[LP NBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exePC:\Windows\System32\wbem\WmiPerfInst.dllsys**OB ; T&  <T!@ ;OBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0PBǘ T&  <T!@ǘPBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**QB! T&  <T!@! ,QBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**RBD T&  <T!@D4 RBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe4C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0SBnK T&  <T!@nKSBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**TBԾ T&  <T!@Ծ4TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**UBb} T&  <T!@b}UBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0VB*~k T&  <T!@*~k` VBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**WB0B5e T&  <T!@0B5e0LWBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllsys**XBJ远 T&  <T!@J远 4XBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0YB,U> T&  <T!@,U>H YBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**ZBb T&  <T!@b|ZBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe|C:\Windows\System32\wbem\WmiPerfInst.dllsys**[B|O T&  <T!@|O [BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0\BXzd T&  <T!@Xzd\BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**]Bِ T&  <T!@ِ]BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**^BxY T&  <T!@xY^BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0_B T&  <T!@ _BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**`B\} T&  <T!@\} `BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**aBn% T&  <T!@n%paBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0bB=ɑ T&  <T!@=ɑbBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**cB`U/ T&  <T!@`U/ cBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**dBQh T&  <T!@Qh dBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dll2\w**0eB<| T&  <T!@<| eBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**fBg T&  <T!@g fBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**gB܏( T&  <T!@܏(@gBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0hB"1 T&  <T!@"1 hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**iB8q T&  <T!@8qiBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**jBLؓ T&  <T!@LؓjBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dll2\w**0kB zC T&  <T!@ zC kBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**lB]M T&  <T!@]MlBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllsys**0mB? T&  <T!@?mBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**nBH  T&  <T!@H  nBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**oB?D T&  <T!@?D oBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllsys**0pBG T&  <T!@GpBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllnst.0**qBvY T&  <T!@vY ` qBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000NWMIProvwmiprvse.exe %systemroot%\system32\wbem\wmiprov.dllP**rB4Ε T&  <T!@4ΕrBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0sB T&  <T!@ sBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**tB%` T&  <T!@%` ttBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**uBS T&  <T!@SL uBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllemR**0vBw T&  <T!@wlvBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**wBҏ T&  <T!@ҏ  wBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**xBK T&  <T!@KHxBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0yBpH` T&  <T!@pH`yBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**zB3&Ǘ T&  <T!@3&Ǘ H zBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**{BV T&  <T!@V0{BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe0C:\Windows\System32\wbem\WmiPerfInst.dllemR**0|Bi T&  <T!@i|BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**}Bᭆ T&  <T!@ᭆ }BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**~BΗ~ T&  <T!@Η~x ~BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exex C:\Windows\System32\wbem\WmiPerfInst.dllemR**0BŘ T&  <T!@Ř BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**B - T&  <T!@ - BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**Bv0m T&  <T!@v0mHBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeHC:\Windows\System32\wbem\WmiPerfInst.dllemR**0Bx T&  <T!@x BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**B T&  <T!@BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**B T&  <T!@L BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeL C:\Windows\System32\wbem\WmiPerfInst.dllemR**0BO+ T&  <T!@O+BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**B= T&  <T!@= BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllmiP**Bڬpٚ T&  <T!@ڬpٚ@LBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe@C:\Windows\System32\wbem\WmiPerfInst.dllemR**0B(bޚ T&  <T!@(bޚBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**Bd"D T&  <T!@d"D BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**B츭| T&  <T!@츭| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0BKE9 T&  <T!@KE9BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**B T&  <T!@tBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exetC:\Windows\System32\wbem\WmiPerfInst.dllmiP**Bz/ T&  <T!@z/ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0Bs D T&  <T!@s DBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllWmiP0**B!N T&  <T!@!N |BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllmiP**BlxT T&  <T!@lxTBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllemR**0B  T&  <T!@ BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllipro0**BMj T&  <T!@Mj$| BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllst.**BR' T&  <T!@R'BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0B4  T&  <T!@4 EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**Bex T&  <T!@exEBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**B#G T&  <T!@#GE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**0B\ T&  <T!@\E BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**B7pž T&  <T!@7pžE TBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**B; T&  <T!@;E< BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe< C:\Windows\System32\wbem\WmiPerfInst.dllst.**0B2S T&  <T!@2SE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**Bt T&  <T!@tE ( BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe C:\Windows\System32\wbem\WmiPerfInst.dllst.**B d T&  <T!@ dEd BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0B0$Ÿ T&  <T!@0$ŸE<BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**BPl( T&  <T!@Pl(E$hBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exe$C:\Windows\System32\wbem\WmiPerfInst.dllst.**B;Yt` T&  <T!@;Yt`E BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0Bt T&  <T!@tE BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0**Bcڠ T&  <T!@cڠE$BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**B^^ T&  <T!@^^EBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000RWmiPerfInstwmiprvse.exeC:\Windows\System32\wbem\WmiPerfInst.dllst.**0B$X' T&  <T!@$X'EDBMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000BFWin32_WIN32_TERMINALSERVICE_Provwmiprvse.exe%SystemRoot%\system32\tscfgwmi.dllmi.d0nst.0l T&  <T@ITEL BMicrosoft-Windows-WMI-Activity#F~J{Microsoft-Windows-WMI-Activity/Operational 000nal 000nal