Edit C:\Windows\SysWOW64\appidapi.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ?x=?n?n?n ??n?nC?n ??n ??n ??n ??n ??n ??nRich?n PE L ,?R ? ! ? H 0? ? V ? P? ] ? ? ? ?& ? $ ? ? \ ? ? ? ? .text ? ? `.data ? ? ? @ ?.idata ? ? ? @ @.rsrc ?& ? ( ? @ @.reloc ? ? ? @ B _? ,? ,?R % t t H? ? WINTRUST.dll bcrypt.dll AUTHZ.dll G @F @Y E @I @Z X W ??]?O??? "? ? lD?;?Fd $ N U L L NULL a p p i d - E n a b l e V 2 a p p i d a p i . d l l m s f t : r m / e v e n t / p o l i c y c h a n g e d A P P X \ S y s t e m R o o t \ S y s t e m 3 2 \ A p p L o c k e r \ . A p p L o c k e r SrpIsAllowed E X E S R P }zh??????A ? ?w K\?[??%2.2x A P P I D : / / P A T H A P P I D : / / S H A 2 5 6 F L A T H A S H A P P I D : / / S H A 1 H A S H A P P I D : / / S H A 2 5 6 H A S H A P P I D : / / F Q B N , . ? " ? $ & ? | ? ??l? ?Om?:A p p x S i g n a t u r e . p 7 x % s \ % s A P P X - \ % u . % u . % u . % 0 2 u \ ? ? \ \ ? ? \ U N C \ \ \ ? ? ? $ & ? | ? ? ?X[??c8??\ R e g i s t r y \ M a c h i n e \ S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ S r p \ G P \ L a s t W r i t e T i m e t v P ? z!??o6 :???" " 2.5.4.10 2.5.4.7 2.5.4.8 2.5.4.6 O = , L = , S = , C = % P R O G R A M F I L E S % \ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n P r o g r a m F i l e s D i r P r o g r a m F i l e s D i r ( x 8 6 ) % O S D R I V E % % W I N D I R % % S Y S T E M 3 2 % % W I N D I R % \ S y s t e m 3 2 % W I N D I R % \ S y s W O W 6 4 % R E M O V A B L E % % H O T % \ \ . \ M o u n t P o i n t M a n a g e r D&k6 f c?$?S H A 2 5 6 M i c r o s o f t P r i m i t i v e P r o v i d e r 1.3.14.3.2.26 2.16.840.1.101.3.4.2.1 H a s h D i g e s t L e n g t h O b j e c t L e n g t h C A T A D M I N , R?2%o]&? ?O r i g i n a l F i l e N a m e P r o d u c t N a m e \ V a r F i l e I n f o \ T r a n s l a t i o n \ S t r i n g F i l e I n f o \ % 0 4 x % 0 4 x \ , F r a m e w o r k @?X?fA?b??? I?Q?C??v{u? s e l e c t * f r o m P r o p e r t y w h e r e P r o p e r t y = ' P r o d u c t N a m e ' O R P r o p e r t y = ' P r o d u c t C o d e ' O R P r o p e r t y = ' P r o d u c t V e r s i o n ' P r o d u c t C o d e P r o d u c t V e r s i o n . \ ? ? RSDS&??]???J?0 appidapi.pdb ? ?U??S3?? ??W?tHtjWX?????#?u? ? ??WS?? WS??? ??t ??t????? 3?^[]? ????U?QQV?5 ? W?? ?,???? ?Pj j ??M?jQVh? ? ?? ?6?u?^?]????U?? SuU3?? ? ? ? ?? ? ? ?|? ? ? ?? ????jh0 ? ? ?u? ? ? à ?? ua3?9 à t? ? ? à VWSh0 ? ? ?5 ? ? ? ;?(? ? F t?v ?v?? ?? ?6?u?= ? _^3?[]? ??? j h? h? ?? ?? ????à ? ?? ?x ? ?? 3?? ????U??,?? 3?E?E3?? ??E??3?W??}??????????? ?F??#uu?t\??3??tU9tQ9E?L?t S???? ???G ????????#?I ?????????? ?3? ?? ?X??? ?? ??^3??s ?]? ????U??$VW3?}?3?u????}???????? S9utS? ?tL93tH9utC? t>?u???? ??M??e ??? ?x??????. ????? ??t ?X??? [?y ?? ? ???? _^?]? ????U???t ?X??? ]? ????U?V??t??? ??z ^]? ????U??? tQ? tK? tE?u3?E?E?E?E?E??? ?u ???? ?u??u??u?;% ?? ?jWX?]? ????U??S?VW?t}??tvS???? ? ????? ??x[???K?3?Qf??f;??+?? M ???w ? ????0?u? ???S? ? ??? ??t _^[?]? ????U??S?VW?ty? ?trS???? ??M?? ??x[???K?3??f??f;??+?? M ???w ? ??? ?8?u? ???S?: ? ??? ??? _^[?]? ????U???t? ]? ????U??Vj ^t????v? ??=3??-S?W???+?+??t? f?t f??Ju?[?u?? ???t3???^]? ????3??% ??= ?u??? t ????? ??????V??x3???? == u?^????U?j j?PQRj+?u ?u?? ? ]? ????U??VW3???t 9xt??j Z?t??u?8 ?tf98u? WRQjPj?PVhH j+?u ?u?? ?0_^]? ????U??V3?? 9pt??j Z?t??u?8 ?tf90u? VRQjPj h( jhH j+?u ?u?? ?0^]? ????U????SVWj Xj f?$3?Xjf?$Xjf?$ Xh? WWh ?$$P f?$*?$,p ?? ?t6?? ?? ? ? ? ? ? ? P?q?qj ? ?$?!# 3???y ? ? ??9=? u QQ?$ ?# WWWW? ? ?? ?u9?$? ??? ?? ? ? ? ? t^? tUP?q?qj ?7Ph? ?? ?y4????? ? ? ? t%? t P?q?qj ? Y????? ? _?^[?]????V3?95? t?5? ?? ?5? ?? ?t,95? tPh? ?? ?? ?5? P?(? ?5? ? ? ??? ?RQ?? ?5? ?5? ^????U???? ?? 3??$p SVWj Xf?$|?$fj Xf?$~3?3?uf?$d???? L$\?$ ?$?\$Rf?$V?$ ?\$?$?$&??$*?$2f?$6?\$:f?$>?$Df?3??$? ?$? ?\$@?$X?$HC??$? P ?$ ?$?\$L?f?3??$Pf?$$f?$0f?$8?? ?>? f?0? 9F? h? ?v?? YY?u>3?\$ 9Vu ? ? ? ?u9Vu? F$t ?t?9Vt?9V(t#?? ? t? ?u? u ? ? ?????? j ?5? ?p? ?u?$|?< ??y ? ? 3??? ? ?? h? ? ?$\ ????v?$\ ? ??xnh ?$\ ? ??xW?v? ? ?$hP???$X P?$pP??L$d?- ??y6? ? = ? t ? t?$dQW?p?pj Y????$ ?$? ?$x3?T$ A?$H? ??8 ?u3? ? = ? ? ? ? ?$dQQ?p?p? ??? ?? ?? h? ? ?$l ????8 ?$h V? ??????h ?$l ? ??????V?$? P???$h P?$? P???$? ?, ??y3? ? = ? ????? ????$? QW?p?pj????$? 3?9Y ???9Y???SSh? ?5? ?5? ??? ? ?\$L????? ? ?$ ?t??u.3?PjPjQ?v?? ??$ ??u3??$ ??$ ? t ?v?$TP??L$x?$? ? ? ??$P??P?D$X#??@ ??? ? ? = ? ???? ???W?p? ?pjY??????? t ?v ?$4P??v?$(P??^ ?$? ??$@P?$H? ??????$@j h? jj jh ?W?? ?$\??u*?5$? ??? ???a??????? ? ?L???$X?QQQ??0 ??$,?t ?$?$ ?$? ?? ?? ?$D?$0?wP??w?$(P??_? ?$`?$0?$83?? ??????$<?t?$8?$?$0?$4?$83??$(? ??????$<?t?$8?$?$$?$(?$P?t$d?$,S?$<?6 ??????$ ? ?$,?tA?? ?? ? ? ? ?=??? ?0??P?q? ?qjY???????$??$ ?7 ??y6? ? = ? ? ? ? W?p? ?pjY????- 3??$? ?? ??3??$? ?$? ???$? ?$? 3??$0?$? ?$? ?$? WP?m ?$? ? ???$? PW?$? PWWQW?$? P?t$<W?? ?uH?$? ?$,?u?? ?? ?? ? ? ? tj? taP?q? ?qjY????9|$,t?$x9xt? ?~, u1?|$ ?$$u?$P?t$ ?x? ?$? P?t$$VQQ?$|?) ?$ ?$? ? ?\$?|$ ? ?$X?t?0 ?$D?t? ?$@?t?? ?$\?t ??tP?(? ?t??? ??? ?|$ t ?$4? ?|$ t ?$(? ?$? ?t)? ?$? ??t ??tQ?(? ?tS????$ t ?t$ ?? ?y?$L t?$H t ?$x???#?L$x?t? ?$| ?_^[3?Cd ?]? ????U?Qd? 3?3????9? tjZ95? u0??h@ VVh?- R?? ?t7??? 3?? ??!E?V?5? ?5? V?5? j??? ?u?$? ??? t ?u?? _?^?]????U?? 3?? < r< v< v<u?? ???? jW?t? 3??? ????U?SV? 3????f9 t?Ou??u ? ???+??>? q?+?(?????+???< f?t f?9?NHu???? ?3??_^?[]? ????Vh? j h@? ?i ? ?5 ??xE?%? W?? 3?j h< ?? ?? P?(? ??x ??r??x3?? ?^????=? t ?? ?tj P?$? ?%? ?%? ?7 ????0 Qj ?p?|? ???d?0 Qj ?p?x? ????U?j QRj+?u ?u?? ?]? ????U??D?? 3?E?VWj?????E???3?QP??l? ??y3? ? = ? ? ? ?? V?p? ?pj Y???? 9]?? ??? ? ??? ? ?????? W??}??u?E?}?PWWW?u?t? ?? uWW?u?p? ???3? ? = ? ? ? ??6 V?p? ?pj Y???? ?;ApPF? ?? ??? C;C? ??;?? ? =?? ? ?k? ?;?? ;?? ?}?9{ ? ?;??U?? 9U?? ??? ? ? Q;Q??U?? 9U??< ? ?? ?/ ?Q;Q??U?? 9U?? ??? ? ??? @??;C ??????M?9? ?? f9A? ?? 9y? 9y ? ?? ? 9S?/ ? ;A?! ? ;A? ? ;A ? ?;?? ;C? ?< ? ? ??;C ? ???7?+?H;?~?;Kwv????M?;?M?c??;Cw[U?;}??E??8? ? = ? t ? ?t?u?p?pj ? Y???? ?????????^3??^ ?]? ? = ? t?@ ?t??p?pj?? ? = ? t?@ ?t?p?pj? Y????? ? = ? t?@ ?t?p?pj?? ? = ? ????? ??????p?pj?? ? = ? ????? ???????p?pj ?? ?;??????3?9t? 9At? 9A t? 9At? 9At? ???3?W?3?????#???#?B??#?B ??#??#?B_?^????U?j jZR? PR?PR?PR?PQhP j+?u ?u?? ?8]? ????U??SV3????t 9Xt??j Z?t??u?8 ?tf9u? SRQjPWVj+?u ?u?? ?(_^[]? ????U??V?t???B?u?+??jZ?u? j RQj hP j+?u ?u?? ? ^]? ????U?Qd?0 SVWh? 3????p??|? ??u? ?Qh? WV?c ???0 ?h?? ?? ?? ???H?D3?? @???@ f?? ?1?_^[?]? ????V??? ? ?t???? ?t???W3?9~<v?D?????G;~<r?ND?H_;??????t?????t???? ?t?????t???? ?t?;???, ?t?,???^?$??^????U???? ?? 3??$? ?SV??$W3??|$??$?tA?$P?$ P? P? P?? 8 ???" ?$?u?$t?$3u?0 ?? ? ?u ? t?4P?? ?4; ??? ?!/ ??? ?v4? ??v0? P?P?6?1 ??? ?? ??? ? ? ? t;3?9~<v4? ? t&? t ?D? ???q?qj Y???? ? G;~<r?~ jZuj??h3?? ? ? jj?$0P?$,P?v?l? ?$0??$4?$?(?,?? ?$?? P?l?PWR?$ ???> ?h?? ?$3??8 t??? ??$?? ?$G??$?r?? ?= ? ug? ta3?3??>? Pht jAX+??$L?? ??G;? r?= ? ?$? ? t ? t?$@P?w?w????= ? ?$? tl? } ?? PQQ?? ? ?= ? ? ?x0? ? t1? ?t+? ? P?w?wj Y????= ? ? ??? ?$? ? ? ? ?? }A?? ?P? P? P?? P?? P?? P?B ?? ?= ? ?? ?? ? t.? ? t&? @t ? ? P?w?wj Y????= ? ? t2? ? ? ? @t ? ? P?w?wjY????= ? ? ? tu? @t0?? ?? ?P?Q?P?R?w?wjY????= ? ? ? t7? @t1? ?? ?P?Q?P?R?w?wjY???????$? t ?? ??x4jZ?$ ?? ?3?9? ?$???3?9Fh?!?Ju??$? ?_^[3?? ?]? ????U?Q?? ??WP???????x?u ???6????x3???????_^?]? ????U?? SVW?3??E?9u ? ? PWW?h? ?@9^<uu3???? r??w3???? ?E??? ????? ???????? ?<?P?vDQ?\ ?D?H? ;??????^@?D3?9^<vPj%Z??f;??D??f9u6f;? ?D??f9t ?D? ??f;wj QW?d? ?uQj%ZC;^<r?N<;??D+??Q???P?? ? ?D??? ?O??? ?F<_^[?]? ??O???? 3?????V?W3??? ?r? ??k?@?? ? j?20 ? ?24 Xf?28 ?<?2@ ?D?2D ?2< ?_^????SVW???h?y ??y3?u?? ?r? ??k??@??? ??0 j?90 ??4 ?94 ?9@ ?9D Xf?98 ???l? ?? ?? _?^[????U?QQVWjX?f??Xf??? ?y??? 3?? ?? r ? ?? ?, ?3 ? ??? |? ? ?Q????? v ? ?G f?( f?* ??v3? ??????, ?u ? ? ? SP?? Q?-Z ? ? ?, j\Yf? ??? |}? f?t$P?, ?? ??Y ? ? ?\Y?, f? ? f?tP?, ?? ???Y ? ?? 3? ? ? ?$ ? ?, f? [?? ? k?@?? ???20 X?24 f?28 ?2@ ?2D ?2< ?_^?]????U??(S????W?3?f??!M????>??~f9E?? ?????]?E?E?% ??" ?? ??* ??? ?f;E? f;E?f;E?9}? f;E?f;E?A?Nu?u??? ??H=? v? ?2????????f???v????????u ? ?N?? ????>?? ??%?0 ??7 Z??f;?+j"^f;?#j\^f;??? uj*^f;? j?^f;?f??f?????$< ?sfE?fE??f???? sj0?j7Zf?%f??Z???M?????3???_^?[?]? ????U??S?VW????3??3?!U?!7!w???9E?? ????j%??E?% ^f90uB?Iu?^?? k?;? ? ?? ??+?? ??f???v3???????u? ?V3?E????Hf;E?+???;??3????@?? H? ??x??f?C?f;]??3???y??t ?'???' ? _?^[?]????SVW?3? ??"?w??0r ?9w?w,0? ?Ar ?Fw?w,7??ar?fw?w,W???r?? ?^?[????U?? V3??=???v? ??5S?3????P?uWS?? ??x;?u ?? ?? _[? ?t?? ?^]????U??SVW???3?????}?h P??l? ??zt?? ?? ?? ???? ???????? S??h ?u?l? ??u???}?WS?h? ??zu?M? ??v?? ???????E?Q;????";???P??W?u?h? ??t ?? ??2??w ??;????u? ?h` ?u?? SW? ??????? ????? ??8??? ?t?????t?????? ??^[?]? ????U??d?0 SVWj83????p???|? ??u ? ? j8WS?S ??? ??? ?E?=?? v ? ?? ??? ???????? ???Q?vP?S ?6u?M?\Xf???P?qV?S ??K?? ?\XWf?? ?? ????f? ??C ?Q?? Q??h? ?3?Xf??(? F?? ?3?r?? f?*?f?1?,?0?? ? ??????_^[?]? ????U?? ?Vj ^t=???v? ??7S?3????P?uWS?? ??x;?u ?? ?3??{_[? ?t?3???^]????U?QQVj^??u?Vh? ??Q?`? 9u?9u?? ??]????U??SV3????t 9Xt??j Z?t??u?8 ?tf9u? Sj?SRQjPWVj+?u ?u?? ?0_^[]? ????U??,?? 3?E???? 3?U?U??f???????E?E?F???E?E?jh? ?5? ??5? ??? ?y)? ? ? ? t? tPV?q? ?qj Y??????3??I ?]? ????U??$ ?? 3?E?E SVW?????? Q?u ????3?u??????????????????? ????\? ?? ?8 ?u?9]u?9]u?3?? P?(???P?P ????? ?0??? ?f?f???????????(???3??,????4????3??8?????<????????D?????@???? ?y 3?????????????H???3?j?L???? f??T???f???????????X??????h?????p????\???? f??d???f???????????x???????????E?????? f??t???f????????????B? ??????E??????|?????}?}?}?}?}?}?E?}???}?}???????P??? ?`??? ?? ?? ???? ??E? ?? ?? ? ????6?X? ???3?E?E$j??U????X??u?u?E?u? ?? ????3?????9F? jh0 W?d? ?? jXf9G? ?? ??f?? ?? f;?? f?????????2??? ?????? ??Q?r S?M ?? ???P????????P?P?????Rh? ?Cj2P???????? ?? C?????f??f;???u?+??????????E?3?????????E? ??]?M?E?M??????@????;F????(???Pj ?????u ?u??? ?yD?3?? ?????? ? ? ? t#? tP??????r?r? jY???? ????t?????t?????t??????^3??E ?]? ????U??T ?? 3?E?E SV?W????? Q?u ????3?u??????????f????????????f?????????????????\? ?? ????????? ?? ?( ?u?9]u?9]u?h? 3?????WP?K ????? ? ??????? ?????f?? ???f?????????????????????????? ????$???? ?y3??????3???????(???jX? ?0???f?f???????????8??????H?????P???j? f??,???f???????????X?????????h?????p???????f????f?????????????????????^???????? ?@????`?????u?u?u?????4????<????D????L????T????\????d????l????t?????}?}?}??????}?E?}?}?}???? ??}?}?E?}?}?? ?????? ?7?X? ?3???x????$j??U?????X?|?????]?E?]? ?? ????3?????9C?, jh V?d? ?tYf?? ?? ?f? f?3????????????U?E? ??F????U?M?U?? jh V?d? ?tUjXf9F? ?? ?3????????????U?E? ??F?? ??U?M?U?A jh V?d? ??+ jXf9F? ?? ??f?? ?? f;?? f?????????*??? ????????? ??Q?r P?G ?? ???P????????????P?P?????Rh? ?Aj*P???????? ?????? B?????f??f;???u?+?????????E? ??????????3???M?M?U?M?E?M?????@????;C???????Pj?????u ?u??? ?yH?3????? ?????? ? ? ? t#? tP????? ?q?qjY????t?????t?????????t?????????t????;At??????^3??? ?]? ????U??X?? 3?E?jH?Zf9u.j{XR?qf??E??:F ? j}Xf??LXf????E????A??E?P?T? ??3??> ?]????U?? SVWj?? VP???3??P? ?t? ? j? VP??P? ?? ? ?????+ff?f?u? ?l???v?? ?$?????M?K?u? ?E?P?rQ?E ????+????H????? ??AP?-E ?? ?? ???_^[?]????U?QQ?SVW??3?M? _?t 9Pt????t??u?8 ?tf9u? ???t9Qt?9?t??u?8 ?t 3?9?u? j SVjPWRjQ?u?u?+?u ?u?? ?8_^[?]? ????U??DSVW3?E????]?]?`? P?d? 9]? ???\? ??M????? ??E? ??E?]?]?E?ig?j j????h ????L? ??C ???j ?H? C? r??W?4 ?!d?0 3? V?p?|? ???t{??? ? = ? tp? tgV?u?? ?p?pj Y??????_??????y;?? ?QQ?,2 d?0 j j ?p?|? ??;?t jY3??? ?}? t ?u?D? ?? t ???X? _?^[?]????U??,SV?W??? ? ???G?? ? ??x ???} u? ?? ??} ? t? ? ? ? t(? ? ? ? ;?B? t=?uW?q?qj Y????#? ? ? ? ;?? tW?q?qj Y???? ? ???% ? = 0 ? ? ?? = ? = tV= t-= ? ;?? ? ? ?q?qj? ;?? ? ? ?q?qj? ;?Z? tQ?q? ?qjY???? ? ?6;?"? t?q? ?qj Y?;??? ? ?} ? t? ?kE? ???? f?????t??3?E??*;?&? t ??? P?q?qjY???? ? f?f?????t ??GB?3?E??$;? ? t??? P?q?qjY???f????????t ?B???? 3?GA???u??u?uP????% ;?? ? ? ?q?qj? ;?? ? ? ?q?qj? = @ ? = P ? = ` tg= p tI= ? t+;?? ? ? R?q? ?qjY????;?x? to?q?qj?;?a? tX?q?qj?;?J? tA?q?qj?,;?3? t*?q?qj?;? ? t?q?qj? Y?(???u3??u?uPP?} ?P?u?u????????_^[?]? ????U?? VW??3?Q?????? ?tj???u? ? ?u? ?PVVVP? ? ?t?P?? ?t?H??? ?t???? ???u?u?? V?u?u?h? ?? t?? ?t??3??_?^?]? ????U??? ?? 3?E??3?Wj4P??????l??????P??????? ?????? ?E?????? ?> 3????4 ?\???x?? ?? 3????? A?????????|????????d???\???????l??P????? Pj??`???? ??????u? ? ? ?????? P????PV?? ?u ?$? ?? j j ????P?? ?t???? ????Pj ???????????? 3??$ h ????WP?< ? ???? ????WPS?? ?? j4?l??WP?< ? ?l??4 3????? ?4??j Y??????4??( ?<??3???????L???????P??jX?x???????4??????3??D???????|???l??P?????Pj??? ??? ????? ????????PW???????????? ??????????$? ??tWS?????? ???? tj ?????? ???^3??4 ?]? ??????????????U??H?? 3?E????? ?????? ?E????1j4?? P?:; ? ??4 ??E? ????j ?? ??3??3 ?]????U?? SV3?M??u?????W?u VPQ?? ??? ?? w}?tq9u?? ??w ?????uBj^?? ?f?f;u f?tf?f;Qu??f?u?????t ??8??????s ??M?j???? ? jo^??$? ??t????_?^[?]? ????U??,SVW3?E? ???E??E?E?E???h QjZ?????t ?? ? ??h QjZ??????t ?? ? ??h QjZ??????t ?? ? ??h( QjZ??????t ?? ? ?? ? ?? u?? u ?? ? 3??E??????Kf??f;E??+???? ??h0 ? ?u??? ??E??:?u ??f??f;E??+??????h8 ? ?u??? ??U??A?u ??????f;E??+M???? ??hD ? ?u??? ??E??=?u ??f??f;E??+????!??hP ?& ?u??? ???"????wU? ??v3??????t9?????????7???? ??3???????y??????j^?? ????b????? ?W??QjZ??????u2?7???? ??3???S???x?]?? ??&??? ?t??t ???3??? t?????????????????????????_?^[?]????U?S3????t????v? ??;??W??tf9t?Iu???+?? ??xQ?u+?? C? ??^[]? ????U?W3??t)? SV???+??? f?t f??NJu?[?u?? ?3???_]? ????U?3??????v? ?? Q?uQ????? ?t3??]? ????U?? ?? 3?E????3?{v? ?eWjX??h? ????Q?? ?=$? ?u???? ?? ??x)? t#S???u?? ?u???? ?? ?_???3??. ?]????U?? VW3????3?u?E??t ??????3??t??w^??????tQ??M?PWj j V?? ?u'?$? ?zu???$? ??t ?? ??3??# ???u?? ??x??83??t????_?^?]????U?? VW3????3?u?E??t ??????3??t??w\??*????tO????PjV?? ?u'?$? ?zu???$? ??t ?? ??3??# ???u?? ??x??83??t????_?^?]????U????4VjYjZjXjf?$Xj"f?$$f?$Yj$f?$Xj0j h ? f?$.?$0D ?$ X f?$?$l f?$4f?$6?$8? f?$<f?$>?$@? ?3 ? h ? ?@? ?$? ?? h? ?(? ?$? ?`? P?d? ?h0 ??!? ?$ P?? j ?$ ?$? ?x~?$?? ?? ??$ ?? j? ? Xf?? ? ?xNj ??$$? ?x=j?$,?$ ? ?x*?=? tj?$4?$ ? ?x? ?x? ^?]????U??$SVWh ? ?<? ?= ? t3?? ? ? 3??? um?? t ?=? t[??? ?????? ????e? ??????? ??xd??? ??????M?? ??x;?? ??(r?? ??x ? ? h ? ?8? _?^[?]?M?r????4 ??3??????=? ? SV?5$? ?$? ;?-W??6?t??-???t?? ??????;??3? (? ? $? ??5? ?? ??(r? ? ?5 ? ?t; ? t ????5? ^[????U???? ?SVWj???P?d? ?t ? ?? d?0 j j ?p?|? ??u ? ?? ??t9???V ??? ????? ?9M??t ?<??? ??? ? = ? t ? tW?u? ?p?pj Y?6????^?? ???t? ?????t? ?$? ?$? ??9HtjY?)??5$? ??^[?]? ????U??8?? 3?E?ES????Wf????????v3??????? ? ?4 S???4? ???????y ??6??? ?t@;?<f??f???v3???????????4? ??U??????x?E?x ? ??? ?? 3?}?} jY?? ?=? ???A?? h? ????} t h? ????3??? tz????f+f?f?????v3????????????Q?t?P?. ?? ?+?????E??. ??U?? ????????G??????=$? ? ?t???G?????? ??? ???? ?t|f?f+E?G ?f?????v3???????L? Q?wP?- ??? ?+???? E??- ??U?? ?(????y??K???? ?M?;Ot?7???x???$? ?.??????^3??+& ?]? ????U??4SVW?3?E?3??u?u???s ? ? ???:uv?f;??? ?? ? ??? ?f?????v3?? ????3?M?? ? ?? ? ?? ??P??w?P?, ? ?&j\Xf9uf;?????? ????E?!??E? ??E?P??u?h? ??E? P??u?L? ?x??3?VVS? ??? 3?}? t ?u?D? ??E?E? ??E?j??u??? ??u?0? ?? ??;Gu 3?u???E????u?,? ??# ?N??M?=?? wN?t??????f???v3??&??????????????u?,? ???5?????? ???3???C??}? t ?u?D? ??? ;Ot???_?^[?]????QV?5$? 3??$? ? ?? ?x?6;??^Y????U?? SVW?3?G? ?5$? ????$? ? ;?? ? ?? ?tf?f+F fG?f?????w~? ??????p?P?vQ?* ? ?+????E??>* ??t??????O???G3?????6?$? ??????:????? ?^?[?]????U??$?SV3?U?? ???u?p?t??t?2jj????Q?(? ??? ??t????t??? ??? ??4?????? ?? ????? j ?u?E?P?u?l? ?????? ?t???3 ?;? v ? ?! ?? ?t]?? ???t????? ??v3????????? jRP?u?T? ??E?;Es??? ? ??thf??jZf??f????v3? ??+???jZ??? j\_f?8??3P???( ? ? ?? 3?!G?? ???J?t ?????U?E ?f???v3???????? ?j?QP?u?T? ?????;??? ?$? ??? ?? ?? ???? ?;sf?\t ?" ?? ? ??E?? ???????wy? ?????q???u?j?u?$? ?? ?u????P??? 9 ???f+ f?f????v3? ??????O?t?P?rQ?' ? ? ?? ? ?????????????yC?? ?]??t ???? ?t??t ???? ???? ?t????# _?^[?]? ????U??P?? 3?E?ESVWj???3??? S???E?E?G?d? ?tL?? ??? ? ???v3???????? ?P?5 ? Q?& ??? !0? ??? ??? 3?E? j ??E?E?E?P??E? Ph ??]??L? ??y4? ? = ? ?& ? ? VS?p? ?pj Y???? ??E?P3?E?Qh - PQQQ?u? ? ? ??y ? ?? ?? ?? 3?? ?}? u ?}? ? ?? ??e? jPj ?? Ph - ??j j j ?u? ? ??x?M??(sj(Y???wY?????tN?u?E?j Ph - ??3?PP?u? ? ??x ? HtHHt?t HHt?u?? ??????? ?}? t ?u?D? ?y??t ???? ???^3?? ?]? ????U??$SVW3???h? jWjWh? ??? ???u ?$? ??? ?? ?? ? ???? ???????? f?f??Q?v?Q?# ? ? ??????????? ??4??????; ?u?S?u?E?0 m PWWW?u? ? ??????? ?t??? ??APS??? ?j\Y???t?b? ?f9H`? ?f9? ???? f;M?f;M?o??9Hufj\Yf9Hu]f?VuVf? ouOf? luHf?uuAf?mu:f?eu3f?{u,j-Yf9H&u#f9H0u f9H:uf9HDuf?^}u 3?{f??0?f???w??????u? ??P?u??" ? ?????? ?M?????? ?u?(? _?^[?]????VW????f;?3?)??;????P?\tf?u?VW?P? ?_^????U??4S?3?W???}??E?E?E?9Gt1?? P?? ? P? ??? ?3?K??9Gt,?? P?? ?@P? ??? ??????? ?3?M??3?9?9? t+?? ?? ??? ??3???=?E????? ???r?3???? ? ? WPd?0 ?p?|? ???? ? ?{ ? ??3?E?E?? E ??S???3??E?+?M??< ?( j X? 9? 3??7R?w?? ???? ?? ??3?;urw;??V??WQ??VVV?u?t? ?? u3?P?u?p? ???o3?U??U?E?M ?<? t"3?W?u?2? ? ??? ??M ??? ? ???r?U?M+? X?U?}?ME?? ????????? ? = ? tN? tHV?p? ?pj Y????2?# ????? ?x!????? ? ????????? t??? ???????_?^[?]? ????U?? SVW?? ?3?M?? ??E?j?Ph? Q?,? ??xY??E? Pj??h? W?,? ??x8???v3??????C?u? ?j j j QPSW? ? ??y?? _?^[?]????V??> t ?6?0? ?& ??t ???? ^????U??? ?? 3?E?? ??VW??3?M?U?Ph? ?? ? ?u ?$? ??? ?? ?? jY3?}??E?E? PV???? ?t?P_W?p???VP? ??? ??E?????????????P?p????p???P?? ?|???? ?? ??U?M????????wr?????tgW???p???P?U???$? ??t??? ??4??t(? w#9rP?w ?u?? ?? ????# ?? ??????? ?M??^3?? ?]? ????U??SV? ??W?VW?u???u??u ??? ??????W?u?u?u ? ?3??k???f9tV?? 3?9u????3???7PVV?h? ??3???????x#?? t????????F3??r?!3??|???t???3????r?^?[?]? ???\ h`? ? ??? ???????????3???????????????????????????????? ???????? ????????????Qh jR????Pj????P? ? ??? j3?j????PQQQ????Pj??????? ??? 3?E?P????P????Ph jh? ?????? ?????? ????\? ?????;???? ?(??? ?0??4??8??????<?????????P????P? ? ??????? ????? ???????? ?P?Phx h ????P?2????????3???f;??+?????????3 ? ?? ? 3?? ????4? ????? ????P????P????????? ?????? ?????? ??? ? ????P????? ??????xc?????tW???????v3???????????????u? ?]???f??P?????q? ? 3? 3?????????@???? j???? ? ????3??e????????????????? t????j??? ???? t ?????D? ?? ? ????U?QVW??jZ3?;?I?f;?AS?;?9????O? ?x$???? ???;????;??? 8?3?_?^?]????U?? 3?V?Wj??f9F?, ??? ? ? f;?? ??? j\YjX??9t????:?????? ?f?? j\??f;? ??f?u???E???+?????? ?P???? ???+?M?????E?P??? ? ?t?????E??Xj\?Y????? 3??j[???f??;??+????M ???tf9~uf;?? 0??? N????j?_^?[?]? ????SV?Wf?f???'???X??? Y?t?3??? f?X??u???? f?3?f#?3?;?Y???HP?? Y?t f?Gf?f;???t2? f?f?f;?????+??PQ?? ? i?? f_^[????U?Q3??E??????w???- ???? ?M?t ?x???! ??]? ????U?SV3????tf9t?Ju??? ?E?t ?x+?8??_?^[]? ????U?QVW??? P???????xD?? X? W+?*S??~???+???< f?t f?9?JNu??u?? ?3??_^?]? ????U??HSVW3?U????3???E?M?h? jQh? ??M?M?M?M?M?M?M?M???M???M?M?? ??xt??j ?w??? ??x_??U??u?P?Q??xI??U?P??Q ??x6??U?P??Q??x#??U?h? P??Q ??x ?? t*????}? ? ? ? ?? ? ?u?? ??U?P??Q ??x?E?U?P??Q ??x?E?U?P??Q??x?E?U?P??Q??x?u? ? ????E?3???I?????? ? ?????u??}?e? ??}?u?e? ??e? P??E?3???????x?}? u??e? ??E?E?u?U?u?M?u????????????u???t?? uW? ?????u??M???Q?P????Q?P????Q?P????Q?P????Q?P????Q?P_?^[?]????U??3?E? ??E?E?E?? ?? P?u ??? ?]? ????U?QQSVW??E?0 P3? ????????? ?????????? ??????? ??WVj?u?u?? ?? ?t??xj?u_jY9NrW??? wN?uHf?f+?M f??f???w ?? ??? ???u? ??P? PS? ? ??$ ?????? ?}? t ?u?D? ?_^[?]? ????U?QQ?? ??Ph ? ?? ?????xj??jj h? ?u?? ??? t ?u?D? ?^?]? ????U??@ ?? 3?E?ES???????V? W3?????!9!y3???????????????S? ??????????????????????????f??????????? ??? ????PVS?? ??? ????Ph? ?????? ??? P?????? ??? ? ò ???? t?????? ???? ????P?????? ???= ???????? P????Pj????????? ?, ????f?f;u f?tf?f;Qu??f?u?3????u ????? ? ????f?f;u f?tf?f;Qu??f?u?3????u?????? ????f?f;u f?tf?f;Qu??f?u?3??????????????? ????Pj j????????n?????????? ???? f??f????v3? ??????????? A????????QPj??????????????????? t ?????? ???? t ?????? ???? t ?????? ?t????3??E??????K?????? ?? ????& ? ??????t ?/???& ? ???^3??. ?]? j^????? ?<???????3?9???? h W?? ?YY?t3??W?? Y???????? ?h P?????? ?YY?t3???????? Y????%?? ?tm?h P?????? ?YY?t3???????? Y???????t/?h S?? YY?t3??S?? Y????%?? ????????? ?????????? ??'?????? ?? ?? ?? Y?u@? 3?????U?Q? SVW? ?? ?? H3??? ?? d? ???? 3??3??;? h? ?P? ? 3????u???=? t j ? Y? ?? ? ?t^?5? ???;?09>t??>??? ? ? ;?? 9Mt??M?? ??P?? 3?=? Y?=? C?? ?=? 9}? 3?? 3?? 3?9] ? d? 3?? ?? ???;? h? ?P? ??3????u?? 9=? j_t j ? ?1h h ? ? ?) YY?u? h ? Y?=? ? Yu3??=? t h? ? Y?t ?uW?u?? ?@? ?_^[?]? ????U?? u? ]?* ????U??sm?9Eu ?u P? YY]?3????j,h?? ? ?? 3?u?E ?w? ? ? u?=@? u?? ? ?t ?? ¤? ?tF?? ? u ?D? ?u?u ?u??E? ??? ??P????YY?e?3?u?u?}? ? ?? ?u?u ?u?(???? ??? ??P? ???YY?e?3?u?u?}? ? ?? ?u?u ?u? ???? ??? ??P???YY?e?3?u?u?} ? ?? ? ?? VV?u??????? ??P???YY?e?3?u?E? VV?u??????? ??P???YY?e?3?u?? ?t,?? VV?u????? ??P? ??YY?e?3?u?E ?t ?? ?? ?u?u ?u????? ??? ??P???YY?e?3?u?u?? ?t??=D? t6?? ?u?u ?u??E? ??? ??P???YY?e?3?u?u?E????? ??? ? ? w ? ? ????????U?V?3??u??t???;u r?]???; ? u? ?4 ????U?j ?H? ?u?L? h ?`? P?D? ]????U??$ ?? ? D? ?@? ? <? ?58? ?=4? f?`? f? T? f? 0? f?,? f?%(? f?-$? ?X? ? ?? ??? ??? ?????? ?? ?? ?H? ?L? ?X? jXk? ?\? jX? ? ? ?\? jX?? ? ?\? jXk? ? ? ??X? ? ? ??X ????]????U??? ? D? ?@? ? <? ?58? ?=4? f?`? f? T? f? 0? f?,? f?%(? f?-$? ?X? ?? ??? ???? ?? ?? ?H? ?L? ?X? jXk? ?\? hX ???]????%? ????%? ????U??3?VW?<??????? ? ;? ??;? B?(;??3?^[]???????U?j? ? h? d? P?SVW?? 1E?3???? ??E? h ? ??tT?- Ph ??????t:?$? ?????????? Y_^[?]?E? 3?8 ????e?E????3?M?? Y_^[?]????????????U???Z f9t3??H<?3?9PE u ? f9Q?]????U???? ?? ?? VW??? ??;? ?t ??? ????8? ??3E?E?x? 1E?<? 1E?4? 3E?M?3?E?E??@? ??3E?M?3?;??5? u??? ? ?? ? _^?]????%? ???h? d?5 ?$?$?$+?VW?? 1E?3???u?E?E??????E?? ?M?? Y__^[?]Q????U??u?u?u ?uh ? h? ? ?]????%? ??? ? ? ???RPh ? ? ZY????? ? ???????? ???????? ???????? ???????? ???????? ???????? ???????? ???????? ???????(? ? ???RPh<? ? ZY?????$? ???????,? ??????? ? ??????? ? ???????? ???????0? ???????? ? ???RPh\? ? ZY?????? ???????? ???????? ???????? ???????? ???????? ???????? ????????U?j ?u h? ?5? ?uh ? ]? ????%0? ????%,? ???h? d?5 ?$?$?$+?VW?? 1E?3?E???u?E?E??????E?? ?M?3??????????%? ????%? ?????? ??? ???? ? ??? ??? ??? ? ? ? 0? D? s? ? ? ? ? ? ? 1? c? w? ? ? ??? ??? ???+? >? ` d? ? ? ? p h? ? ? ? ? l? ? ? (? ? ? ? 4? V? x? ? ? ? ? ? ? ?? ? n? N? ,? 0? ? ? ? l? N? ? ? WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WTHelperGetProvCertFromChain WinVerifyTrust CryptCATAdminCalcHashFromFileHandle CryptCATAdminAcquireContext CryptCATAdminEnumCatalogFromHash CryptCATCatalogInfoFromContext CryptCATAdminReleaseCatalogContext CryptCATAdminReleaseContext BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptGetProperty BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash AuthzFreeResourceManager AuthziAccessCheckEx AuthzFreeContext AuthzInitializeResourceManager AuthzInitializeContextFromToken AuthziModifySecurityAttributes AuthziQuerySecurityAttributes AuthzGetInformationFromContext ?R ? x? ? ? ? ? V ? ? t T ? ? ? (? A? \? s? ? appidapi.dll AppIDConstructAppxAttributes AppIDDecodeAttributeString AppIDEncodeAttributeString AppIDFreeAttributeString AppIDGetAppxFileAttributes AppIDGetFileAttributes AppIDReleaseAppxFileAttributes AppIDReleaseFileAttributes ????N??? ? ? | , . ? " ? $ & ? \ ? ? \ ? ? ?? N? ]? l? {? ? ? }? n? _? P? A? ? 2? #? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? l? R? >? ? ? ? ? ? ? ? x? f? N? ? >? (? *? ? |? ? ?? ?? ?\ ?v ?? ? ? 0? ? ? ? ? ? ?? x? n? b? T? J? <? ? ? ? ~? d? L? 4? ? ? ? ? ? ? ? ? ? ? t? V? 8? ? ? ? ? ? ? ? ? ? v? \? B? *? ? ? ? ? ? ? ? ? z? b? H? .? N? b? 0? ? ? p? ? ? |? ? ? ? ? ? ? "? ? ? B? ?? $? r? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? l? R? >? ? ? ? ? ? ? ? x? f? N? ? >? (? *? ? |? ? ?? ?? ?\ ?v ?? ? ? 0? ? ? ? ? ? ?? x? n? b? T? J? <? ? ? ? ~? d? L? 4? ? ? ? ? ? ? ? ? ? ? t? V? 8? ? ? ? ? ? ? ? ? ? v? \? B? *? ? ? ? ? ? ? ? ? z? b? H? .? N? b? _wcsicmp ?_vsnprintf memmove ?_vsnwprintf ?iswspace ?wcsstr ?_wtol q _XcptFilter _amsg_exit ?free ?malloc ?_initterm msvcrt.dll l_except_handler4_common E EtwGetTraceLoggerHandle D EtwGetTraceEnableLevel C EtwGetTraceEnableFlags L EtwRegisterTraceGuidsW S EtwUnregisterTraceGuids ?RtlRunOnceExecuteOnce ?RtlInitUnicodeString oRtlNtStatusToDosErrorNoTeb Q EtwTraceMessage 8 EtwEventRegister : EtwEventUnregister ; EtwEventWrite ?RtlAllocateHeap ?RtlFreeHeap ?NtReadFile [NtWaitForSingleObject ?NtQueryInformationFile LRtlUpcaseUnicodeString cRtlEqualUnicodeString ?NtQueryLicenseValue 6 EtwEventEnabled HRtlLengthSid ?RtlGUIDFromString ?RtlPrefixUnicodeString {NtOpenFile #NtDelayExecution ? NtClose RtlInitializeSRWLock |RtlAcquireSRWLockExclusive ?RtlReleaseSRWLockExclusive ?RtlCopyUnicodeString ?NtOpenSymbolicLinkObject ?NtQuerySymbolicLinkObject ?NtQueryVolumeInformationFile ?NtQueryObject .NtDeviceIoControlFile NtCreateSection pNtMapViewOfSection ? LdrResSearchResource QNtUnmapViewOfSection ?RtlCompareUnicodeString ~NtOpenKey ?NtQueryValueKey 4NtSetValueKey ntdll.dll ADVAPI32.dll K CertGetNameStringW ? CryptSIPRetrieveSubjectGuidForCatalogFile ? CryptSIPLoad CRYPT32.dll msi.dll ? SHCreateStreamOnFileW SHLWAPI.dll CoCreateInstance { CoTaskMemFree ole32.dll SLRegisterWindowsEvent $ SLUnregisterWindowsEvent SLC.dll DisableThreadLibraryCalls ? CreateEventW OGetLastError CloseHandle ?WaitForSingleObject ? CreateFileW GetCurrentProcessId SetLastError ?PackageIdFromFullName ?GetPackagePath vIsWow64Process GetCurrentProcess ?Wow64DisableWow64FsRedirection ?Wow64RevertWow64FsRedirection ?GetFinalPathNameByHandleW LSleep |UnhandledExceptionFilter =SetUnhandledExceptionFilter [TerminateProcess *QueryPerformanceCounter GetCurrentThreadId ?GetSystemTimeAsFileTime ?GetTickCount KERNEL32.dll DelayLoadFailureHook ?ResolveDelayLoadedAPI memcpy memset ?( ?? ?@ ? X ? p ? ? ? ? ? ? ? ? ? ? ? ? ? ? W E V T _ T E M P L A T E M U I ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n d F i l e D e s c r i p t i o n A p p l i c a t i o n I d e n t i t y A P I s D l l r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) : I n t e r n a l N a m e a p p i d a p i . d l l ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . B O r i g i n a l F i l e n a m e a p p i d a p i . d l l j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ?CRIM? h?<?J??"?4sL '?*?y?????]`? ??]?O??? "\ WEVT? ? ? ? ? \ h x CHANh ? ? M i c r o s o f t - W i n d o w s - A p p I D / O p e r a t i o n a l TTBL? TEMP? t ???*?? ? ? A?? ? F i l e P a t h A n d S t a t u s D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ?' F i l e P a t h ?? ? S t a t u s ? ? ? $ F i l e P a t h L e n g t h $ F i l e P a t h B u f f e r S t a t u s TEMP? ? ???:_??R? A??\ MZ" F i l e P a t h P u b l i s h e r N a m e A n d S t a t u s D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ?' F i l e P a t h ??& ? P u b l i s h e r N a m e ?? ? S t a t u s $ H t ? $ F i l e P a t h L e n g t h $ F i l e P a t h B u f f e r , P u b l i s h e r N a m e L e n g t h , P u b l i s h e r N a m e B u f f e r S t a t u s TEMP8 ? ??h?&? ?'? A??? | S t a t u s D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ? S t a t u s ? S t a t u s OPCO LEVLd P P4 w i n : E r r o r ( w i n : I n f o r m a t i o n a l TASK KEYW EVNT` ? ?? ?( ? ? ?? ? ? ? ?? ? ? ? ?? ? ? ? ?? ? ? ? ?? ? ? ? ?? ? ? WEVT? ? @ ? ? ? OPCOD l ????X , A p p I d T r i g g e r O p c o d e LEVL@ P? ( w i n : I n f o r m a t i o n a l TASK KEYWH ????? , A p p I d T r i g g e r K e y w o r d EVNTD l ???? L ? X ? WEVTt ? ? ? t ? T t ? CHAN? ? d ? ? ? , ? M i c r o s o f t - W i n d o w s - A p p L o c k e r / E X E a n d D L L \ M i c r o s o f t - W i n d o w s - A p p L o c k e r / M S I a n d S c r i p t l M i c r o s o f t - W i n d o w s - A p p L o c k e r / P a c k a g e d a p p - E x e c u t i o n l M i c r o s o f t - W i n d o w s - A p p L o c k e r / P a c k a g e d a p p - D e p l o y m e n t TTBL? TEMPP ? ?F{??,??? A?? ? R u l e A n d F i l e D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ? P o l i c y N a m e ?? w? R u l e I d ?? g R u l e N a m e ?? uG R u l e S d d l ?? ? T a r g e t U s e r ??* ? T a r g e t P r o c e s s I d ?? ?' F i l e P a t h ?? j? F i l e H a s h ?? ? F q b n 8 ` t ? ? ? D h ? ? ? ? ( P o l i c y N a m e L e n g t h ( P o l i c y N a m e B u f f e r R u l e I d $ R u l e N a m e L e n g t h $ R u l e N a m e B u f f e r $ R u l e S d d l L e n g t h $ R u l e S d d l B u f f e r T a r g e t U s e r $ T a r g e t P r o c e s s I d $ F i l e P a t h L e n g t h $ F i l e P a t h B u f f e r $ F i l e H a s h L e n g t h F i l e H a s h F q b n L e n g t h F q b n TEMP? gT?gi?Z*??? A??? ? R u l e A n d F i l e D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ? P o l i c y N a m e ?? w? R u l e I d ?? g R u l e N a m e ?? uG R u l e S d d l ?? ? T a r g e t U s e r ??* ? T a r g e t P r o c e s s I d ?? X P a c k a g e ?? ? F q b n < d x ? ? ? $ H h ? ? ( P o l i c y N a m e L e n g t h ( P o l i c y N a m e B u f f e r R u l e I d $ R u l e N a m e L e n g t h $ R u l e N a m e B u f f e r $ R u l e S d d l L e n g t h $ R u l e S d d l B u f f e r T a r g e t U s e r $ T a r g e t P r o c e s s I d P a c k a g e L e n g t h P a c k a g e B u f f e r F q b n L e n g t h F q b n TEMP8 ? ????_bh? A??? | S t a t u s D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ? S t a t u s ? S t a t u s TEMP? ??? .O?/ ?<0 A??? +V F i l e P a t h D a t a ? ? x m l n s D h t t p : / / s c h e m a s . m i c r o s o f t . c o m / s c h e m a s / e v e n t / M i c r o s o f t . W i n d o w s / 1 . 0 . 0 . 0 ?? ?' F i l e P a t h , P $ F i l e P a t h L e n g t h $ F i l e P a t h B u f f e r OPCOT 2? 2? w i n : S t a r t w i n : S t o p LEVL? P? R P, w i n : E r r o r w i n : W a r n i n g ( w i n : I n f o r m a t i o n a l TASK ???? ? ???? ? ???? $ ???? T , S r p P o l i c y C o n v e r s i o n ( S r p P o l i c y R u l e S o r t 0 S r p P o l i c y H i t C o u n t J o i n S r p P o l i c y L o a d KEYW EVNTP @ ?@ ? ? ? A ?A ? ? ? B ?B ? ? ? C ?C ? ? ? D ?D ? ? ? E @E ? ? ? F @F ? ? ? G @G ? ? ? H ?H ? ? ? I @H ? ? ? J ???? ? ? ` K ???? ? ? ` L ???? ? ? ` M ???? ? ? | N ???? ? ? | O ???? ? ? ? P ???? ? ? ? Q ???? ? ? ? R ???? ? ? ? S ???? ? ? ? T T ? ? ? U U ? ? ? V V ? ? ? W W ? ? X X ? ? Y Y ? ? Z Z ? ? [ Z ? ? ? ??? fS?e??"N@?6??"q???[? ? * ? ? ? ? W E V T _ T E M P L A T E M U I M U I e n - U S ? 00X0\04143<3D3L3?3?3?3 444 4$4,444<4?4?4?7?8?8T:X:`:?: ; ;E;K;n;w;?;?;?;?;?;?;?;?;?;?;?;?;?; <<< <"<<<N<f<k<q<v<?<?<?<?< =?=?>?>(??? '1T1?1?1?1?1?1222'2d2k2s2?2?2?2?2?2?2?2?23 3%3A3G3X3^3w3?3?3?3?3?3?3?3?3?3?3?3?3?3?3?344 4'4?45$5?5?5?5?5?5?56A6F6?6?6?6?6 7T7Y7?7?7?7?7?7X8]8y8?8?8 :":>:h:m:?:/;9;T;Z;n;?;!<<?< == =&=2=G=M=T=]=g=x=?=V>o>w>?>?>?>?>?>?>?>?>?>??6?O?v????????? 0 ? 0 0!0:0?1?1?1?2D2\2?2?2?2?2?2?2?2?2?233?3?3"404F44?4?4?4?5?6?6?67V7?7?7 8*8H8{8?8?8?8#9@9S9h9w9?9?9?9?9?9;?;?;\<j<?<?<?> @ l ?2?293O3?3?3?3O4?4?4 535;5?56 6X6f6?6?6?6?6?6?6777K7?7?7~9?9?9?9?:N;k;q;?;?;M<s<?=?>?>?>]?d????? P ? ?021S1Y1p1?1:2b2q2z2?2?2?2l3z3?3?3?34 44d4z4?4?4?4?4585H5n5?5?5?5?5?5?5?5?5?5?56?6?6?6?6?6?6>7S7?7n8?8`9u9?9?9?9?9?:?:;;D;y;0<i<<?<?<?<:=x=?=>a>?>?>?>A????? ` ? 0d0?0;2c2r2x2?2%3/3?3?3?3?34?4?4?4?4?4?4?4?4?4?4?4?4?455 595>5I5P5W5?5?5?5?5?5?5?5?56696X6u6~6?6?6?6?6?67 77 7$7.7;7c7?7?7?7?71868N8l8?8 9O9a9r9 :?:?;?; <7<g<?<?< =E=M=?=?=:>?>??? p ? [0u0?0?1?1?12 262?2?2?2?2?2X3?3?3-454C4?45 6i6?6?6 7 7&77?7&8=8i8?8?8?8e9l9?9?9?9?9 :>:G:Q:?:?: ;<?<!=Q=|=?=?=:>?>???? ? ? 1+1?12U2?3?3?3?344X4?46?6 7F7g7p7?7?7$8=8S8_8v8?8?8?8?859w9_:t:?:";);=;Y;f;;?;?;?;?;?;?;3<8<=<g<w<|<?<?<?<?<?<=&=.=5=;=A=v=?=?=?=?=?=?=?=?=?=?=> >s>?>?>?>?> ? ( 0?0?0?0"1>1G1R1Y1p1v1|1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?1?12 22+212<2B2N2^2g22?2?2?2?2?2?2?2?2?2?2?2?2?2?2?2?2?2?233 3(3:3F3?3?3?3?3?3?3?4?4?4?4?455+585@5R5]5z5?5?5?5?566$636B6Q6`6o6~6?6?6?6?6?6?6?6?6 77-7@7O7^7m7|7?7?7?7?7?7?7?7?7 8J8V8t8x8?8?8?8?8?8?8?8?8?8?8?8?8?8?8?8?8?899 ? T 00$0<0T0l0?0?0?0?0?0?0?0?0?0?0?0?0?0?0?0?0?0?0?0?0 111 111 1 1$1(1,101 $ 0?#? *?? ?#?0?#?10 `?e 0?? +?7??0??0?? +?70?? ???????$f???`???1?|0?x +?71?h?d ?}?K.??gD??????(?? ?qi9:? ?d???L3 $ h???*? ?'_k?9??Z^u??) V1$ tm%3V?v $ 61A???-F?a? ?????hg? 4 1?>? 4?(???:???-}L|??? D q7ue? e?/?`*&V?'1???V\?? T ??VC?R?,}?? ?<???c? d r_0??Y%vR:Y ?GD?3aRd?Fd9?? t ??2V???(r??)? ???+W?? ? ^8?,?1ig? 0?s? ????yd? ? ;?=x-?)?8? H????;?P?k? ? ???;???2? ?2?jz??*? ? ?NpE{?,? ??7?mlFxa??T?? ? ?RV-? M?^???????!?!wV ? ?0?? ?????}zr??1 ?CF? ? ?[2?7?>?9%?[=??O??FL ?h ? 010 `?e pa)q`<?? c?y!dh?Q????|??? ?0?0??3 $? h?? $0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110 130617214338Z 140917214338Z0p1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation10UMicrosoft Windows0?"0 *?? ? 0? ? ?b?\E?F??:??,??x???????4?D??K?_?????<}]???S?? AB???irSSO?x??1??#\t?&???}??`0D??;?? ???O? ???(?:?h?it?q^i" ?+?CT???Sb?<??v ????;ph??????+??'??'??? ^???? T?5E& ?0?{0 U %0+ +?7 0 U ?IS? iC(?(&o?3s?&?0QU J0H?0D1 0 U MOPR1301U*31612+09a6d5f3-8125-416a-b9b1-447d2c25afa90 U #0??)9??x??O?|U?0TU M0K0I???http://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0?http://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0 U ?0 0 *?? ? x&?C&??2?!e??'? k????Hj??V??w3???i??W?34p;*?;0X????????0?/? ?9<8????.?+?:?;?h?D??????"06?$?94GK??G???(???F?$??{<?IF? ??Vbd?GXY?!?F?eUQC{?!/=;/?S??O?/ ? ?z'J?? +G%??'"? ??=-???-0??0?? avV 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 111019184142Z 261019185142Z0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110?"0 *?? ? 0? ? ? ??. ???? !?33?????? ???8??-|by???5 p????6u?1?p?7?F?([?#,?G??'???? ;S5|??'? ??# o??n?<A???]jM? %(\6?? ????['?'x0?* k"?`,? S?I?a?h sD]}?+???5]l +\??#?n?&?6??'?2;A?,???TN? ??ú?w?$? ?C0??0 +?7 0 U ?)9??x??O?|U?0 +?7 S u b C A0 U ?0U ?0?0 U #0??V??\bh?=?[???0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0 *?? ? ?qQ???9>?<Rn+?s?h??4M?&?1F?y?8.Ek??(? ?? ?? 6fj?????@26v?Z???????TlP0X?|?????W?!s4Z???? ???~?? ???? rS???=1e????=??B??T ??? G??NA???*???!(??9_>?`?? ???Q?G??=?*hw?Lb{??z?4Kbz???7?-?| ?=?Z???:???!7??ug?W^)9?-??s[????X????5???$?5? u?V?x,??????~,c??#!?xl?6+???-??@?E??k>??* j?G?c 2??6 *pZ?YqKW???!<? ?????? ????b?c ?w}=?????o3??? Y~1??0??0?0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113 $? h?? $0 `?e ??0 *?? 1 +?70 +?7 10 +?70/ *?? 1" C 65M??wl???????M?0Z +?7 1L0J?$?" M i c r o s o f t W i n d o w s?"? http://www.microsoft.com/windows0 *?? ? ??????0??1 ?M+L ?8???YN?;?e?,?A?*???%M?????OO3oF? ?B?0??? ^8?>2}p???}mjp??"???8%?oa??fy] Y?9C'??<????d)?? ???????t?W????p????r??G+?????;[7??? ?{?G?*?$X?!?? ? * {? ??5????J0?F +?71?60?2 *?? ?#0? 10 `?e 0?= *?? ?,?(0?$ +? 010 `?e ?:ou??$??g????+??#???Q?wx20130822053016.811Z0?????0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:7D2E-3782-B0F71%0#U Microsoft Time-Stamp Service??0?q0?Y? a ?* 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100?"0 *?? ? 0? ? ? ??: ???i?tT? ??|hK,_????>f+[?S'1 A? ? ?a0Y?0D??TC ??8???s0W&?E ????$`2X`F?G?2? tag??????]?n(????a??' $gr!?Kd?b?? =?u??M@Q??>g???~?K????z* 1?N??5? ??<?/D??d?? ????]^?O"M ??0??0 +?7 0 U ?:\?1?C{|F?3hZ?U0 +?7 S u b C A0 U ?0U ?0?0 U #0??V??\bh?=?[???0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0?U ??0?0? +?7.0?0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0 *?? ? ?Q ????=??!o???1???Wm0?????x??%??kTW+Q??S????@A?\?\?5?$VKt?????7}Z? ?yJ? ?8?/y?????? oK0D$"<???)????2J'??/??3?_?W@??f??jb?J ?&?9?Jqc?!m??<?}????? ?8??? ????B???"8 ?%???~cY%z.9Wv????????G????}??;q ?t?"a?P o?? ?1?:?Gx????~akow?? ?9????? ?? ???*T9?? U??;?-??3.)?/T'!???(??????AM??*?f0?t2K?{??/?!???<?q??U????0??M? ?O? 8/?X.? ?5? ' ?~5 ?6?_?t?0??0??3 -%?_?? -0 *?? 0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100 130327201315Z 140627201315Z0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:7D2E-3782-B0F71%0#U Microsoft Time-Stamp Service0?"0 *?? ? 0? ? ??]?2??(? ??!.???'?H?v#JE?=I? ?I???;CI??+sA?z??4? ? ':?j?:?J?&?_M??? T?3j 9'???W [M??ZK?Y?/'?T2???Q?4?x?+?;?_(??7 ?E-? #?E*p??2LE????x?3-???Q?????F?u8???-q?5f8 7Qe????? ?C! ?0?0 U ??U?_?]^,q???0 U #0??:\?1?C{|F?3hZ?U0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U ?0 0U % 0 +0 *?? ? =/ ? TN??:?G?>T?9u ??????H??^3(?9?9???d)??O?????0???? D? ???u??? q.?B???_|PD???? ??Piu)c?????:F!s }B? Se?^??$T???{????#OD1??????:Fi????K[?QE`??7?9GE ~?,R?3O????y? 8 ?v0?^0????0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:7D2E-3782-B0F71%0#U Microsoft Time-Stamp Service?% 0 + ???3XV??x???0???0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:B027-C6F8-1D881+0)U"Microsoft Time Source Master Clock0 *?? ??0"20130822002813Z20130823002813Z0t0: +? 1,0*0 ?? 0 ]0 ?0 ?+ 06 +? 1(0&0 +? ? 0 ?? 0 ? 0 *?? ? 5?4?&i??F?b=??l?i??4??e?? ?? ?D|??3: +rzO? t&?%[3?%?}????o?e??fw????]???}????9n?? ??$??????????sTX???e? l?~?P??z;???/???f:??p??7? ? ???f?2 = G?w????* ??+I~?V 1??0??0?0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 -%?_?? -0 `?e ?20 *?? 1 *?? 0/ *?? 1" ??~?X= q S?u `7??%9?"?=0? *?? 1?0?0?0????3XV??x?0?0??0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 -%?_?? -0?#cE?k6i???"l??0 *?? ? !Z@p???T[HwP??u??dv ?63???????,??*?.e<@i?7???? CV?.???K? ?J????5?"/?4??t??3 ?P??-??!f<?:+J?????*? ??#` ???? ???R?R?`?k\S??"???Oe?H?g???P nLk'?..?????@(V???,?Xk? ???
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de