KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/wbem/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/wbem/WinMgmtR.dll
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$A[=�:S�:S�:S�|���:S�|�Q�:S�Rich:S�PEd�I���" &��


�Җ` ��T.rdata@@.rsrc�� � @@I��
lllI��$��I������T.rdataT.rdata$voltmdl�.rdata$zzzdbg .rsrc$01!�.rsrc$02 tU�'hm�
߅�1l�vV�<��@��HŞI���(���@�X�p�����	�	�	�����$
{!|
WEVT_TEMPLATEMUIx4VS_VERSION_INFO��
k�e
k�e?�StringFileInfo�040904B0LCompanyNameMicrosoft Corporation0FileDescriptionWMIn'FileVersion10.0.26100.7019 (WinBuild.160101.0800):
InternalNameWinMgmtR.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.B
OriginalFilenameWinMgmtR.dllj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.26100.7019DVarFileInfo$Translation	�CRIM{S���
	F�F��[8���#F�~�J�{��T0WEVT0���
�"8#D#�#�#($CHAN8�	�ApplicationTTBL8"TEMP|��l~�֋%\������m=A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���{Provider
��"	Namespace
0ProviderNamespaceTEMPTXf����P�,���A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI����Error
����MOF
��ErrorMOFTEMP��W�\v��S�džϦLtA���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���Query
��"	Namespace
����Error
 8QueryNamespaceErrorTEMP|l:ⵧ��^&��`A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
�� EventProviderQueryTEMP�\�moa�7W�vvC�A���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��"	Namespace
Hhx EventProviderQueryNamespaceTEMP��	\�moa�7W�vvC�A���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��"	Namespace

4
D
 EventProviderQueryNamespaceTEMP�N�Pȩ��X$B��e;�A��1�data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��x�Class
��"	Namespace
4DT EventProviderQueryClassNamespaceTEMP��
*�Ic\AR�3���QA���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
EventProvider
���Query
��x�Class
�
 EventProviderQueryClassTEMP4,�0L,�>AU8!����-A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"1�ErrorNumber
@ErrorNumberTEMPlx�`U9�fn[�k�G�&A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
����Error
��NamespaceErrorTEMP�8vQ��G�U��*a�A���data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���Object
��"	Namespace
����Error
@TlObjectNamespaceErrorTEMPd�����:R���amA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��x�Class
��]�Result
��ClassResultTEMP��M�V詆^��җ_3{A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��x�Class
�ClassTEMP,��������^P�')�K/A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
NamespaceTEMP,(�������^P�')�K/A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
<NamespaceTEMP�g��hw^*�^�@Y��A��v�data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI���i	QuotaName
�� ��
QuotaValue
��(�1QuotaThreshold
��
�	ProcessID
��*�VProvidersInHost
d|���QuotaNameQuotaValue$QuotaThreshold HostProcessID$ProvidersInHostTEMP4�0L,�>AU8!����-A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"1�ErrorNumber
ErrorNumberTEMP�`��x�@��V���Mi�t�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI����Error
��,l]BackupRepository
��Error(BackupRepositoryTEMP0�x��ݛ�QU.[z�@��pA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI�� �
BackupFile
�BackupFileTEMP��M�V詆^��җ_3{A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��x�Class
�ClassTEMPH ��Mpy;Zjߙ�o��A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,l]BackupRepository
, (BackupRepositoryTEMP0T!x��ݛ�QU.[z�@��pA����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI�� �
BackupFile
h!BackupFileTEMPt�"�A9i�*�T/_��?&�A����data_0x8000003F{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI�� �
BackupFile
����Error
�"�"BackupFileErrorPRVA@#Microsoft-Windows-WMIOPCOLEVL�Pt#P�#P�#win:Errorwin:Warning(win:InformationalTASKKEYWH�8�#,win:EventlogClassicEVNT,>����/	�HP#�
��
��/
	�
�P#�����/	�HP#�����/	��P#�����/	��P#�����/	�\
P#�����/	�lP#�����/	�(P#�����/	�P#�+��+��/+	�+\\#�0��0�00	�0�\#�:��:�0:	�:|\#�;��;�0;	�;�\#�?��?�0?	�?�\#�A��A�0A	�A\#�B��B�0B	�B\#�C	�CT h#�C��C�0D	�D�!h#�D��D�0�@��@ 0�	��h#������$0�	��P#������(0�	���h#������,0�	��4P#������00�	���h#������40�	��(P#������80�	��h#������<0�	��T\#������@0�	��h#������D0�	��h#������H0�	��h#������L0�	��h#������P0�	���h#��#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#WEVT�J��0�1
hu�u�u,v8vHvCHAN8�0����01�����1����PMicrosoft-Windows-WMI-Activity/Trace\Microsoft-Windows-WMI-Activity/OperationalPMicrosoft-Windows-WMI-Activity/DebugTTBL�CTEMPT�3���+�/V
b-�o�jA�����
Operation_{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
��"B)OperationId
��g�	Operation
��&�3
ClientMachine
���_User
��*?�ClientProcessId
��&f�
NamespaceName
l4�4�4�4�4�45(GroupOperationIdOperationIdOperation ClientMachineUser$ClientProcessId NamespaceNameTEMP8�pf�ɨyS���v�P�A����\
Operation_New{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��,�GroupOperationId
��"B)OperationId
��g�	Operation
��&�3
ClientMachine
��.�$ClientMachineFQDN
���_User
��*?�ClientProcessId
��>�HClientProcessCreationTime

��&f�
NamespaceName
	��a�IsLocal

�8�8$9@9X9x9�9�9

�9:

,: CorrelationId(GroupOperationIdOperationIdOperation ClientMachine(ClientMachineFQDNUser$ClientProcessId8ClientProcessCreationTime NamespaceNameIsLocalTEMP�

`=��D¾�[�K�e��]A���2�
MethodExec{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��,�GroupOperationId
��"B)OperationId
���	ClassName
�� L�
MethodName
��2f�ImplementationClass
��&�3
ClientMachine
��.�$ClientMachineFQDN
���_User
��*?�ClientProcessId
	��>�HClientProcessCreationTime

��&f�
NamespaceName
��a�IsLocal

d>�>�>�>�>�>(?H?p?�?

�?�?

�? CorrelationId(GroupOperationIdOperationIdClassNameMethodName,ImplementationClass ClientMachine(ClientMachineFQDNUser$ClientProcessId8ClientProcessCreationTime NamespaceNameIsLocalTEMP�(C]k��&�QgE0��Ԃ>A����
ProcessCreate{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��,�GroupOperationId
��"B)OperationId
��"cCommandline
��,�KCreatedProcessId
��@��CreatedProcessCreationTime

��&�3
ClientMachine
��.�$ClientMachineFQDN
���_User
��*?�ClientProcessId
	��>�HClientProcessCreationTime

��a�IsLocal

D8D`D|D�D

�D�DEDETE

xE

�E CorrelationId(GroupOperationIdOperationIdCommandline(CreatedProcessId<CreatedProcessCreationTime ClientMachine(ClientMachineFQDNUser$ClientProcessId8ClientProcessCreationTimeIsLocalTEMP�xG�����%"SC�T8Z�A��~d�Operation_Provider_Info{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
��g�	Operation
��$<�ProviderName
��$ProviderGuid
���8Path
�GHH<H\H(GroupOperationIdOperation ProviderName ProviderGuidPathTEMP�HJ�{P�Q�Ti�Y���A����Operation_Provider_Info_New{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
��g�	Operation
���iHostId
��$<�ProviderName
��$ProviderGuid
���8Path
�J�JKK4KTK(GroupOperationIdOperationHostId ProviderName ProviderGuidPathTEMP0dL�2�8_P��N8��A�����Operation_Stop{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
xLOperationIdTEMP��M��MյKYY�SOp����A���[Operation_Stop_New{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
�� J�
ResultCode
�MNOperationIdResultCodeTEMP,�O��551UH-����A��K�Operation_Provider_Message{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
��g�	Operation
���aChannel
����Message
�OP(P<POperationIdOperationChannelMessageTEMP� R�!��azW�D��mO�JA���hOperation_Provider_Error{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
��g�	Operation
���aErrorId
��&��
ErrorCategory
����Message
�� ��
TargetName
�R�R�R�RSSOperationIdOperationErrorId ErrorCategoryMessageTargetNameTEMP,�Tov�{�^�Y����H׾A��IS�Operation_Provider_Result{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"B)OperationId
��g�	Operation
���aErrorId
����Message
UU4UHUOperationIdOperationErrorIdMessageTEMP�Wp��>[�sTq���AWUA���cOperation_Client{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&��
CorrelationId
��*�	ProcessId
��X�Protocol
��g�	Operation
���_User
��"	Namespace
�W�W�W�W�WX CorrelationIdProcessIdProtocolOperationUserNamespaceTEMP�TY���#V�cS��V(dv�XA���UOperation_ESSDrop{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��$��ConsumerType
��&xb
PossibleCause
|Y�Y ConsumerType PossibleCauseTEMP�[v��D"{�Z��:h��<A��
^�Operation_ESSToConsumer{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��$��ConsumerType
��&xb
PossibleCause
([H[ ConsumerType PossibleCauseTEMPt�\���ٕq�\�"І�7[�A����Operation_RepDelete{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"")OperationID
��g�	Operation
],]D]h]

�]

�]OperationIDOperation$ClientProcessId(ClientMachineFQDN8ClientProcessCreationTimeIsLocalTEMP�(_��h��V���T�z�A��.UOperation_RepUpdate{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"")OperationID
��g�	Operation
���Flags
�_�_�_�_`

D`

|`OperationIDOperationFlags$ClientProcessId(ClientMachineFQDN8ClientProcessCreationTimeIsLocalTEMPP�`)5�H7^A����d����D�	EventDataTEMP��b�xR�7V�5B�*٪A��~)-Operation_StartedOperational{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��$<�ProviderName
���sCode
��"��HostProcess
��
�	ProcessID
��$v#ProviderPath
�bc(cDc\c ProviderNameCodeHostProcessProcessID ProviderPathTEMP��e��k�UPE�����A���g<Operation_ClientFailure{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��[Id
��&�3
ClientMachine
���_User
��*?�ClientProcessId
��}	Component
��g�	Operation
�� J�
ResultCode
��&xb
PossibleCause
4f@f`fpf�f�f�f�fId ClientMachineUser$ClientProcessIdComponentOperationResultCode PossibleCauseTEMPlh���1)6Yɽ����A��6��Operation_DebugMessageLog{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&�
ComponentName
��&ح
MessageDetail
��g�FileName
�h�h�h ComponentName MessageDetailFileNameTEMP<�j��F� \U��Cv0�A��O�Operation_DebugErrorLog{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&�
ComponentName
���aErrorId
��"Y�ErrorDetail
��g�FileName
�j�jk$k ComponentNameErrorIdErrorDetailFileNameTEMPm&#����R��]���pvA���t�Operation_EssStarted{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&f�
NamespaceName
���Query
���_User
��
�	Processid
���{Provider
��c�queryid
��&xb
PossibleCause
�m�m�m�mn n4n NamespaceNameQueryUserprocessid providerNamequeryid PossibleCauseTEMP�0p�Ax��]����D;A�����Operation_TemporaryEssStarted{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��&f�
NamespaceName
���Query
���_User
��
�	Processid
��&�3
ClientMachine
��&xb
PossibleCause
�p�p�p�pqq NamespaceNameQueryUserprocessidMachineName PossibleCauseTEMP4�r������X�0�M����A��Q�=Operation_ESStoConsumerBinding{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��"	Namespace
���BESS
��֗CONSUMER
��&xb
PossibleCause
s,s8sPsNamespaceESSCONSUMER PossibleCauseTEMP��t]��G�yU��&���A��0}�Operation_PollingQuery{�xmlns3http://manifests.microsoft.com/win/2006/windows/WMI��,�GroupOperationId
���Query
��&f�
NamespaceName
u8uHu(GroupOperationIdQuery NamespaceNamePRVAT|uMicrosoft-Windows-WMI-ActivityOPCOLEVLdP�uPvwin:Error(win:InformationalTASKKEYWEVNT����1�u�0���E�u�0��dK�u�0��<5�u�0��lH�u�0
�
��L�u�0��$N�u�0��PP�u�0��0S�u�0��\U�u�0��X�u�0��h[�u�0���]�u�0���Y�u�0��@:�u�0��@�u�0��ps�u�02�2��`�u�0d d�g�0e e�i�u�0�@���`�0�@��|c�u�0�@��<k�0�@��Tn�0�@��<q�0�����$ʱf��2���$j]��fh�N�PE*�{�l�*����WEVT_TEMPLATEMUIMUIen-US

Anon7 - 2021