0byt3m1n1
Path:
C:
/
Windows
/
System32
/
wbem
/
[
Home
]
File: refs.mof
#pragma classflags("forceupdate") #pragma namespace("\\\\.\\root\\WMI") //ModuleName = ProtogonWmiLog (Init called in Function DriverEntry) [Dynamic, Description("Ntfs_ProtogonWmiLog"), guid("{740f3c34-57df-4bad-8eea-72ac69ad5df5}"), locale("MS\\0x409")] class ProtogonWmiLog : EventTrace { uint32 Flags; };