HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/eventvwr.exe.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!

@,@ 8.rdata�@@.rsrc  @@�;Y
T88�;Y$��8.rdata8x.rdata$zzzdbg p.rsrc$01p$p.rsrc$02 dn&F�8n�6�*U{�
F�-0ta�o����;Y��0�H�h�����k��p������0@P`p��!��X"�d#�t$��8-L��-��MUI���q��k��A]'���!2���$[�ZB�����MUIzh-TW���ȀddQ/���	�Microsoft JhengHei UIP	i���P!�j���P8*'	l���/����x(&E):��Pd(ph���Pm<2���ܕ�����Ȁ��hh�N�N�j��hV	�Microsoft JhengHei UIP	i���P!;�j���P8�'	l���/����x(&E):��Pd�ph���P�@2���ܕ��2~b
N0R [�N�N�j��hV] ;N�c�S�jHh %1�ˊ͑�e�WL� Microsoft Windows �[݈z_0U~b
N0R Windows @b(W�v�v�0(W͑�e_U�R Microsoft Windows KN�_��Y�g�POUL��N*g�zl�ˊ͑�e�WL� Microsoft Windows �[݈z_0?!q�l_U�R Microsoft Management Console�ˊ͑�e�WL� Microsoft Windows �[݈z_0�N�N�j��hVnWindows �N�N�j��hV

Eventvwr [<computer name>] [/v:<query or view file>] [/l:<log file>] [/c:<channel>] [/f:<filter>] [/?]

<computer name> -- c�[���j���N�N�v��f�
T1z0�Y�g*gc�[�GRGP-��p,g_j��f�0

/v:<query or view file> -- c�[�N�N�j��hV@b�^�z�v�gb�b�j���jHh0�gb��jHh�_�S+T�N <QueryList> ��-��v	gHe Crimson XML �gb���j���jHhS+T XML �gb�W[2N�SvQ�N-��[�FO
NS+T�N�N0dkx��
N�S�N� /c �T /l TBfX[(W0

/l:<log file> -- c�[����_U�v���j0dk���j�a/f/S�Q�v evtx0evt b etl �j0dkx��
N�S�N� /v �T /c TBfX[(W0

/c:<channel> -- c�[��(W�j��hV_U�RBfx��S�v�S�
T1z0dkx��
N�S�N� /v �T /l TBfX[(W0

/f:<filter> -- �Y�g� /c b /l -dM�O(u��g�N XPath �gb��v<h_c�[��WY(u0R�S�b���j�v�{x�hV��Y�g*g� /c b /l -dM�O(u���_�/f�N <QueryList> ��-��v	gHe�N�N���j XML �gb�0�Y�g�gb�S+Tzz<h��_��Nٖ__��bOOteP�gb�0�Y�g�gb�,g��S+Tٖ__��GR�_�\�gb�-N�vٖ__����f�p�U__�0�O�Y�XML �gb� <QueryList><Query Id= 0  Path= SystemA ><Select Path= SystemB >*[System[(Level=2)]]</Select></Query></QueryList> �_�c�[�YN /f:  <QueryList><Query Id='0' Path='System'><Select Path='System'>*[System[(Level=2)]]</Select></Query></QueryList>\ 

/? -- o�:y�PO(u�e_
�o`0x�� /c: � /f: 8l`��_��N�v-dM�O(u0PA
}T�NR_xeU�t1YWe0!q�l_U�R�N�N�j��hV0%s�4VS_VERSION_INFO��
aJ
aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft CorporationJFileDescription�N�N�j��hVL]eQ_�{t�UCQ_U�Rz_h$FileVersion10.0.19041.1 (WinBuild.160101.0800)2	InternalNameeventvwr�.LegalCopyright� Microsoft Corporation. All rights reserved.JOriginalFilenameeventvwr.exe.muij%ProductNameMicrosoft� Windows� Operating System>
ProductVersion10.0.19041.1DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD