????

Your IP : 3.145.101.53


Current Path : C:/Windows/System32/wbem/
Upload File :
Current File : C:/Windows/System32/wbem/WinMgmtR.dll

MZ����@���	�!�L�!This program cannot be run in DOS mode.

$��<߱�R���R���R�U�����R�U�P���R�Rich��R�PEd��o���" ��


��`A `~T.rdata�@@.rsrc`~ � @@�o��
TTT�o��$���o����T.rdataT|.rdata$zzzdbg .rsrc$01!P}.rsrc$02 ��ӈ��z��E��Ȥ�*�[�e��o/�o���(���@�X�p�����	�	�	�x���$�x!|
WEVT_TEMPLATEMUIx4VS_VERSION_INFO��
!|O
!|O?�StringFileInfo�040904B0LCompanyNameMicrosoft Corporation0FileDescriptionWMIn'FileVersion10.0.20348.2849 (WinBuild.160101.0800):
InternalNameWinMgmtR.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.B
OriginalFilenameWinMgmtR.dllj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.20348.2849DVarFileInfo$Translation	�CRIM�xS���
	F�F��[8���#F�~�J�{��T0WEVT0���
�"8#D#�#�#($CHAN8�	�ApplicationTTBL8"TEMP|�D.��$4\2H㔞#`A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���{Provider
��"	Namespace
0ProviderNamespaceTEMPTX��	o�Q��߻W�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI����Error
����MOF
��ErrorMOFTEMP��)w	�R�Wd�p)�A���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���Query
��"	Namespace
����Error
 8QueryNamespaceErrorTEMP|lb��-�\�8�p��A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
�� EventProviderQueryTEMP���ԃ?�mV��i]��CqA���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��"	Namespace
Hhx EventProviderQueryNamespaceTEMP��	��ԃ?�mV��i]��CqA���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��"	Namespace

4
D
 EventProviderQueryNamespaceTEMP���{-�Xx�DFq��A��1�data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��x�Class
��"	Namespace
4DT EventProviderQueryClassNamespaceTEMP��
_�~M��gXVtK��7A���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��x�Class
�
 EventProviderQueryClassTEMP4,�|���]O��BS)�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"1�ErrorNumber
@ErrorNumberTEMPlxQ�n!�V�7k��A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
����Error
��NamespaceErrorTEMP��(��Ё�W��Vj�A���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���Object
��"	Namespace
����Error
@TlObjectNamespaceErrorTEMPd���,�<�R�R��}�CA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��x�Class
��]�Result
��ClassResultTEMP��S�%T�U����*�ϝA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��x�Class
�ClassTEMP,�Y��z��JW)���d`�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
NamespaceTEMP,(Y��z��JW)���d`�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
<NamespaceTEMP�G�L zm\K����}6A��v�data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���i	QuotaName
�� ��
QuotaValue
��(�1QuotaThreshold
��
�	ProcessID
��*�VProvidersInHost
d|���QuotaNameQuotaValue$QuotaThreshold HostProcessID$ProvidersInHostTEMP4�|���]O��BS)�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"1�ErrorNumber
ErrorNumberTEMP�`�,6�1�V���;6�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI����Error
��,l]BackupRepository
��Error(BackupRepositoryTEMP0��'1X.U�|l�E�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI�� �
BackupFile
�BackupFileTEMP��S�%T�U����*�ϝA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��x�Class
�ClassTEMPH �;�ǀ�P�cg��ǰA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,l]BackupRepository
, (BackupRepositoryTEMP0T!�'1X.U�|l�E�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI�� �
BackupFile
h!BackupFileTEMPt�"�^ۊP9^۳��`�gA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI�� �
BackupFile
����Error
�"�"BackupFileErrorPRVA@#Microsoft-Windows-WMIOPCOLEVL�Pt#P�#P�#win:Errorwin:Warning(win:InformationalTASKKEYWH�8�#,win:EventlogClassicEVNT,>����/	�HP#�
��
��/
	�
�P#�����/	�HP#�����/	��P#�����/	��P#�����/	�\
P#�����/	�lP#�����/	�(P#�����/	�P#�+��+��/+	�+\\#�0��0�00	�0�\#�:��:�0:	�:|\#�;��;�0;	�;�\#�?��?�0?	�?�\#�A��A�0A	�A\#�B��B�0B	�B\#�C	�CT h#�C��C�0D	�D�!h#�D��D�0�@��@ 0�	��h#������$0�	��P#������(0�	���h#������,0�	��4P#������00�	���h#������40�	��(P#������80�	��h#������<0�	��T\#������@0�	��h#������D0�	��h#������H0�	��h#������L0�	��h#������P0�	���h#��#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#WEVT�H��0�1
ps�s�s4t@tPtCHAN8�0����01�����1����PMicrosoft-Windows-WMI-Activity/Trace\Microsoft-Windows-WMI-Activity/OperationalPMicrosoft-Windows-WMI-Activity/DebugTTBL�ATEMPT�34�U90�#T���d���(A�����
Operation_{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
��"B)OperationId
��g�	Operation
��&�3
ClientMachine
���_User
��*?�ClientProcessId
��&f�
NamespaceName
l4�4�4�4�4�45(GroupOperationIdOperationIdOperation ClientMachineUser$ClientProcessId NamespaceNameTEMP8`�e�SE<R7*�$K� A����\
Operation_New{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��,�GroupOperationId
��"B)OperationId
��g�	Operation
��&�3
ClientMachine
��.�$ClientMachineFQDN
���_User
��*?�ClientProcessId
��>�HClientProcessCreationTime

��&f�
NamespaceName
	��a�IsLocal

�8�8$9@9X9x9�9�9

�9:

,: CorrelationId(GroupOperationIdOperationIdOperation ClientMachine(ClientMachineFQDNUser$ClientProcessId8ClientProcessCreationTime NamespaceNameIsLocalTEMP�

`=Bt��\m��-Gl�)A���2�
MethodExec{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��,�GroupOperationId
��"B)OperationId
���	ClassName
�� L�
MethodName
��2f�ImplementationClass
��&�3
ClientMachine
��.�$ClientMachineFQDN
���_User
��*?�ClientProcessId
	��>�HClientProcessCreationTime

��&f�
NamespaceName
��a�IsLocal

d>�>�>�>�>�>(?H?p?�?

�?�?

�? CorrelationId(GroupOperationIdOperationIdClassNameMethodName,ImplementationClass ClientMachine(ClientMachineFQDNUser$ClientProcessId8ClientProcessCreationTime NamespaceNameIsLocalTEMP�(C3U���TR�@��J�A����
ProcessCreate{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��,�GroupOperationId
��"B)OperationId
��"cCommandline
��,�KCreatedProcessId
��@��CreatedProcessCreationTime

��&�3
ClientMachine
��.�$ClientMachineFQDN
���_User
��*?�ClientProcessId
	��>�HClientProcessCreationTime

��a�IsLocal

D8D`D|D�D

�D�DEDETE

xE

�E CorrelationId(GroupOperationIdOperationIdCommandline(CreatedProcessId<CreatedProcessCreationTime ClientMachine(ClientMachineFQDNUser$ClientProcessId8ClientProcessCreationTimeIsLocalTEMP�xG��F,z�cS�@�z��A��~d�Operation_Provider_Info{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
��g�	Operation
��$<�ProviderName
��$ProviderGuid
���8Path
�GHH<H\H(GroupOperationIdOperation ProviderName ProviderGuidPathTEMP�HJ��*�XXK����&�A����Operation_Provider_Info_New{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
��g�	Operation
���iHostId
��$<�ProviderName
��$ProviderGuid
���8Path
�J�JKK4KTK(GroupOperationIdOperationHostId ProviderName ProviderGuidPathTEMP0dL�/j�S^�����	�A�����Operation_Stop{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
xLOperationIdTEMP��Mkjg��P>��i͐�A���[Operation_Stop_New{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
�� J�
ResultCode
�MNOperationIdResultCodeTEMP,�O8�(��~�\Y��9]A��K�Operation_Provider_Message{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
��g�	Operation
���aChannel
����Message
�OP(P<POperationIdOperationChannelMessageTEMP� R�e�Z�_�Q���&YBJA���hOperation_Provider_Error{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
��g�	Operation
���aErrorId
��&��
ErrorCategory
����Message
�� ��
TargetName
�R�R�R�RSSOperationIdOperationErrorId ErrorCategoryMessageTargetNameTEMP,�T�,����U�I����sA��IS�Operation_Provider_Result{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
��g�	Operation
���aErrorId
����Message
UU4UHUOperationIdOperationErrorIdMessageTEMP�Wu����qY%
��JT4A���cOperation_Client{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��*�	ProcessId
��X�Protocol
��g�	Operation
���_User
��"	Namespace
�W�W�W�W�WX CorrelationIdProcessIdProtocolOperationUserNamespaceTEMP�TY��c�~AYQ�*�^A���UOperation_ESSDrop{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��$��ConsumerType
��&xb
PossibleCause
|Y�Y ConsumerType PossibleCauseTEMP�[#��W
T��NI"�A��
^�Operation_ESSToConsumer{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��$��ConsumerType
��&xb
PossibleCause
([H[ ConsumerType PossibleCauseTEMPt�\*�S��_\����6�@�A����Operation_RepDelete{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"")OperationID
��g�	Operation
],]D]h]

�]

�]OperationIDOperation$ClientProcessId(ClientMachineFQDN8ClientProcessCreationTimeIsLocalTEMP�(_������PN��&bD�A��.UOperation_RepUpdate{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"")OperationID
��g�	Operation
���Flags
�_�_�_�_`

D`

|`OperationIDOperationFlags$ClientProcessId(ClientMachineFQDN8ClientProcessCreationTimeIsLocalTEMPP�`)5�H7^A����d����D�	EventDataTEMP��b�Ͱ�{�F[P'�ok��A��~)-Operation_StartedOperational{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��$<�ProviderName
���sCode
��"��HostProcess
��
�	ProcessID
��$v#ProviderPath
�bc(cDc\c ProviderNameCodeHostProcessProcessID ProviderPathTEMP��e(~K��95S��V�X�A���g<Operation_ClientFailure{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��[Id
��&�3
ClientMachine
���_User
��*?�ClientProcessId
��}	Component
��g�	Operation
�� J�
ResultCode
��&xb
PossibleCause
4f@f`fpf�f�f�f�fId ClientMachineUser$ClientProcessIdComponentOperationResultCode PossibleCauseTEMPlh�_�ZL]�G��c�A��6��Operation_DebugMessageLog{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&�
ComponentName
��&ح
MessageDetail
��g�FileName
�h�h�h ComponentName MessageDetailFileNameTEMP<�j�bTP�|�[Z�ri���A��O�Operation_DebugErrorLog{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&�
ComponentName
���aErrorId
��"Y�ErrorDetail
��g�FileName
�j�jk$k ComponentNameErrorIdErrorDetailFileNameTEMPm#ѿ�c"YZV�4�WA���t�Operation_EssStarted{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&f�
NamespaceName
���Query
���_User
��
�	Processid
���{Provider
��c�queryid
��&xb
PossibleCause
�m�m�m�mn n4n NamespaceNameQueryUserprocessid providerNamequeryid PossibleCauseTEMP�0p�s���q�\�����&A�����Operation_TemporaryEssStarted{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&f�
NamespaceName
���Query
���_User
��
�	Processid
��&�3
ClientMachine
��&xb
PossibleCause
�p�p�p�pqq NamespaceNameQueryUserprocessidMachineName PossibleCauseTEMP4�r6��07Ĩ\�+{([A��Q�=Operation_ESStoConsumerBinding{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
���BESS
��֗CONSUMER
��&xb
PossibleCause
s,s8sPsNamespaceESSCONSUMER PossibleCausePRVAT�sMicrosoft-Windows-WMI-ActivityOPCOLEVLdP�sPtwin:Error(win:InformationalTASKKEYWEVNT����1�s�0���E�s�0��dK�s�0��<5�s�0��lH�s�0
�
��L�s�0��$N�s�0��PP�s�0��0S�s�0��\U�s�0��X�s�0��h[�s�0���]�s�0���Y�s�0��@:�s�0��@�s�02�2��`�s�0d d�g�0e e�i�s�0�@���`�0�@��|c�s�0�@��<k�0�@��Tn�0�@��<q�0�����ᢖ����"q`����fh�N�PE*�{�l�*����WEVT_TEMPLATEMUIMUIen-US