MZ@ !L!This program cannot be run in DOS mode. $PELnR"!  rn  .` K(   H.texttp r `.rsrc(t@@.reloc z@BPH|@lN 8P "9`TƐ-+ZWKmx%t>u0w.4fY0AWR(/6|%dn^{( *"}*>{( *"}*>{( *"}*{*"}*2{( *6( }*0] {-( +.{3{( +{3(! +s" z{, o# ($ *($ *J~ }( *{ *"} *{ *"} *{*"}*{*"}*{*"}*{*"}*0u{ ( -{ (e ( } {(i}{o% -0{o& {o& {o& {o& *0(' rp(( ,U{(h o) +'o* (& r!ps+ (, o- -,o. {o/ +K(0 o1 -; (j{ {(2 {o3 o4 -!($ (5 -o. *(1 :'4[ tX05(6 { {(7 {o3 o4 -*($ *~ } s8 }~ }s9 }s: }( *{*>}}*{*>}}*{*>}}*{*"}*2{( *6( }*>{( *R( }}*{*"}*{*"}*2{( *6( }*0{3J{o; -w{o< {o< {o< {o< {o< *{31{o= -${o> {o> {o> *0 {, {@{-{(h 8{(f {{(? o@ 1rsA o) +'o*  oB 1 rpoC & oC &o- - ,o. (D ( (E (F o) +6o* (G ($ r!ps+ (, o- -,o. {@{(<{oU  oH +?(I   (J    (K od{,  ($ +  o\($ (L -h o. {3K{o/ +#(0   o1 - (j  ($ (5 -o. s" z*@g4 F WL00> ( , rp(T *(e (S &(T &sz*) 2(0Ps8 }~ }sM }~ }sN }}s: }( *{#*"}#*{$*"}$*{%*"}%*{&*"}&*2{'( *6( }'*2{(( *6( }(*2{)( *6( })*{$oP -{$oQ {$oQ *J{*{#oR *0(O  {*(S oT >sA oU +1oV  oB 1 rpoC & oW oX oC &o- - ,o. (D ( oY (E (F {), o# ($ *($ *2>p 0I sZ {$o[ {%o\ {&(io] {'o^ {(o_ *s` }#sa }$~ }%~ }&s` }*( *0%rp0rp1rp2rQp3rp4rPp5rp6r0p7rp8sb 9~9 Boc ~9 Eoc ~9 Toc ~9 Woc ~9 Doc ~9 Goc ~9 Voc ~9 Yoc ~9 Coc ~9 Foc ~9 Uoc ~9 Xoc *R(d se }/*"sR*"sR*0M sf {/og ,6~9oh oi ,~9oh oj ok ,(V+*0* (W ol - om *on Xoo *0 sp oq or os st ~0~2ou ~1~3ou ov ~4ow ov ~5ow ov ~6ow ov ~7ow -~ +ox  -~ + ox -~ +ox -~ +ox   ( - ( , sy  +; ( -&( , rp(z sy   o{ + oY sz( - (Xo| ( -! s} o~  o ( o ~9oh oj   ,+   sY  *0h ~8( -*I\o i.sz( ( ( s  s *V(d (](b*v(\o (a o a*,"(\o\( ,(aoa**{:*r( , rps z}:*2(\oW *2(\o *2(\o *{;*"};*{<*"}<*0O~ (g o@ .sqzo) o- &o* ( -sz  svz*>D 0O~ (g o@ .sqzo) o- &o* ( -sz  szz*>D 0( o rpo ( -sqz*0Qs8 o) +, o* (go  rps+ o, o- - , o. *% 8E 0Z( , s +Fs  ( o t  &rpo , s + s~z*1=O 0Xo o rpo -rp+r p(z s o o r"po s s s *( *"( *&( *&( *0~ ,o ( -o *(k*0"(D ( (E (l*&(m*&(n*(k*"(l*0,(D ( (o(E (m*&(n*(k*"(l*0,(D ( (o(E (m*&(n*(k*"(l*0,(D ( (o(E (m*&(n*( *0"(D ( (E ( *&( *&( *( *0"(D ( (E ( *&( *&( *( *0"(D ( (E ( *&( *&( *( *0"(D ( (E ( *&( *&( *( *0"(D ( (E ( *&( *&( *(d *03~=( , r,p( o s =~=*~>*>*V(rp~>o *V(rp~>o *V(r p~>o *V(r9p~>o *V(rp~>o *V(rp~>o *V(rp~>o *V(rp~>o *V(r/p~>o *V(rep~>o *V(rp~>o *V(rp~>o *V(rp~>o *V(rp~>o *V(rKp~>o *V(rsp~>o *lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSetPADPADP渚㔈Nəg崋Z82wXX.S e&InvalidFilePublisherInformation&MergingDomainPolicy;$MergingLocalPolicy4RuleGenerationIgnoredFiles&SettingDomainPolicy$SettingLocalPolicyd+The specified directory does not exist: {0}-The following event log cannot be opened: {0}9The following event could not be successfully parsed: {0}?The following file publisher information cannot be parsed: {0} n M7Z     Lz4 L1g zz=v %  Y 1z  1   zg z z k N } N 6 wX       9 T kX y   # ?_t  f1 t1  'J  K 1 , a  z    Q2^      *"dL {  ""Haa  a a( > a#>&a +Q9a /QKa :Yea =e ra=k!a4=p!a4=t!a4=x!a4=|!a=!a=!a=!Ea=!^a=wa =f!U!)YVUVUVUfSk`vrzSk{!!!z)YVVVVV )3F;R`c!n!!3)YV V V 4 1E 1b 1 1 1 1 1 1$ 1C 1f ' 9 J Y p t $ ( - 2 "$ +(!D8!N= !XCT!hC"vC#"83"=<"8L"=U"8e"=n""$v"+("8 "= "hC #vC #$ #( )#- 1#2 :# B#  K# S#  \#-$d#6(m#?u#J#XC$hC%U(U%vC%% %% %$% (%%$%18%==&I8&V=-&c$5&o(>&{F&O&8\&=l&XC'hC`))vC$*C,*L5*V=*_F*$N*(W*-$_*6(h* 8u* =*& 8 *G = *8!*=!*XC"*hC"*h C"+ i"),vC"h,s "-v"- $- %- &. 'T. )/ *p0v+0T -0` -0.0.0p /0} / 1 /1 / 1 /)1 011 0<1 -11 -32 45H2 ?72% N9H31 T:3vC;3v(;3v[<3vb>3 j@3vCA4v(A64v[B@4vbDJ4vCFR4v(F\4v[G4vbI4vCK4v(K4v[L4vbN4vCP4v(P5v[Q<5vbSF5vCUP5v(U~5v[V5vbX5vCZ5v(Z5v[[5vb]5vC_5v(_6v[` 6vbb*6vCd46v(db6v[el6vbgv6vCi6v(i6v[j6vbl6vCn6 xn 7 }n7n7%o07?oF7Yo\7sor7o7o7o7o7o7!o76o 8Zo"8ro88oN8od8oQQQQQQQQQQQQQQQWQQQQQQQQQ`QQQQQQQ`eWnvQQQ``` ` ` `  ` `  # + Q v(vv(v( v(v(v(!v()v1v(9v(AvIvYv avCivHA3A3qF9TqYyfvC vCvCvCvC9'$y-9 C$qX$, vy!C4,< Y!0> AJ<!VontDvCvC4vCL9LT9T|f\9vC}qy(dlt  tl!LvCTvC vb |9|4 =( 9 q$L$vCUn b(px  G vC|vCvC vCvdvC J AJdJd d d vC'$( !v !H 14% 1E$qv(qS/ qZqc5 v(qq; qz9A (qg qp A Qv(vw T q Yv(qa+i+ k y$q` D4 av v(  q av(Y$q v(Y$Y$Y$qv vC)vC)v()v[)vb)@$1vC1v(1v[1vbvHvCvCZ ` vf s vz $\(a,fx\|af).\af)a).[.{.S.c .k .s. . .# .+ .3.;".C6.K{CNIaI2ciia >p > a)IIIaiai28aaaaa a # ) )aIaI i{h iai1 1   aC KaSa a  )a) IIaiiaa{ { P S ~ F  n   &|GKGPPPPG%P|GKafoGtafGPPG Pn=w GoG P P%Pg   g$ )  !G`t*>       !#"(!)!*#+#-%,%.'/'0)1)3+2+4-5-6/7/8191?3>3A5@5B7C7E9D9G;F;H=I=J?K?]A\A^C_E`GaIbIcKdKMOOQSUWY[]_acegikmo%6X_|  < C K a z   'Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dllSetAppLockerPolicyCmdletMicrosoft.Security.ApplicationId.PolicyManagement.CmdletsGetAppLockerPolicyCmdletPolicyTypeTestAppLockerPolicyCmdletGetAppLockerFileInformationCmdletInformationSourceNewAppLockerPolicyCmdletAppLockerEventTypeAppLockerEventLogAppLockerEventInformationCmdletHelperCmdletExceptionResolvingPathExceptionResolvingFileExceptionResolvingDirectoryExceptionResolvingUserExceptionFileDoesNotExistExceptionDirectoryDoesNotExistExceptionParsingFilePublisherInformationExceptionOpeningEventLogExceptionParsingEventLogExceptionResourcesSystem.Management.AutomationPSCmdletmscorlibSystemEnumObjectIEquatable`1ExceptionMicrosoft.Security.ApplicationId.PolicyManagement.PolicyManagerMicrosoft.Security.ApplicationId.PolicyManagementPolicyManagementExceptionm_xmlPolicyFilePathMicrosoft.Security.ApplicationId.PolicyManagement.PolicyModelAppLockerPolicym_policym_ldapPathm_mergeget_XmlPolicyset_XmlPolicyget_PolicyObjectset_PolicyObjectget_Ldapset_LdapSwitchParameterget_Mergeset_MergeBeginProcessingProcessRecord.ctorXmlPolicyPolicyObjectLdapMergem_policyTypem_displayXmlget_Localset_Localget_Domainset_Domainget_Effectiveset_Effectiveget_Xmlset_XmlLocalDomainEffectiveXmlvalue__System.Collections.GenericList`1m_filesPathsm_userPolicyDecisionm_filtersMicrosoft.Windows.Appx.PackageManager.CommandsAppxPackagem_appxPackagesSystem.Security.PrincipalSecurityIdentifierm_userSidget_Pathset_Pathget_Packagesset_Packagesget_Userset_Userget_Filterset_FilterProcessFilePathPackagesUserFilterm_directoryAppLockerFileTypem_filesTypesm_recursem_eventLogm_logPathm_eventsTypesm_displayStatisticsm_informationSourceget_Directoryset_Directoryget_FileTypeset_FileTypeget_Recurseset_Recurseget_EventLogset_EventLogget_LogPathset_LogPathget_EventTypeset_EventTypeget_Statisticsset_StatisticsOpenEventLogDirectoryFileTypeRecurseEventLogLogPathEventTypeStatisticsFileAppxUnspecifiedFileInformationm_filesInformationsRuleTypem_ruleTypesm_ruleNamePrefixm_optimizem_ignoreMissingFileInformationm_allFilesInformationsget_FileInformationset_FileInformationget_RuleTypeset_RuleTypeget_RuleNamePrefixset_RuleNamePrefixget_Optimizeset_Optimizeget_IgnoreMissingFileInformationset_IgnoreMissingFileInformationEndProcessingRuleGenerationSettingsCreateRuleGenerationSettingsRuleNamePrefixOptimizeIgnoreMissingFileInformationAllowedDeniedAuditedSystem.CoreSystem.Diagnostics.Eventing.ReaderEventLogReaderm_eventLogReaderFileAccessEventXmlNamespace1FileAccessEventXmlNamespace2FileAccessEventXmlNamespaceUrl1FileAccessEventXmlNamespaceUrl2FileAccessEventXmlFilePathQueryFileAccessEventXmlFilePublisherQueryFileAccessEventXmlFileHashQueryFileAccessEventXmlPackageQueryUnsignedFilePublisherDictionary`2EventsIdsMap.cctorPathTypeOpenEventLogByLogFileOpenEventLogByLogNameICollection`1CollectEventsInformationsEventRecordCollectEventInformationParseEventFilePublisherParseFilePublisherm_fileInformationm_policyDecisionm_counterGetHashCodeEqualsFilePathget_FilePathget_FilePublisherFileHashget_FileHashget_PolicyDecisionset_PolicyDecisionget_Counterset_CounterCounterResolveFileResolveDirectoryResolvePSPathResolvePSPathsResolveUserAppxPackageAsFileInformationSystem.Runtime.SerializationSerializationInfoStreamingContextErrorMessageSystem.ResourcesResourceManagerresourceManSystem.GlobalizationCultureInforesourceCultureget_ResourceManagerget_Cultureset_Cultureget_DirectoryDoesNotExistget_FailedOpeningEventLogget_FailedParsingEventLogget_FailedParsingFilePublisherInformationget_FailedResolvingDirectoryget_FailedResolvingFileget_FailedResolvingPathget_FailedResolvingUserget_FailedSearchingDirectoriesget_FileDoesNotExistget_InvalidFilePublisherInformationget_MergingDomainPolicyget_MergingLocalPolicyget_RuleGenerationIgnoredFilesget_SettingDomainPolicyget_SettingLocalPolicyCultureDirectoryDoesNotExistFailedOpeningEventLogFailedParsingEventLogFailedParsingFilePublisherInformationFailedResolvingDirectoryFailedResolvingFileFailedResolvingPathFailedResolvingUserFailedSearchingDirectoriesFileDoesNotExistInvalidFilePublisherInformationMergingDomainPolicyMergingLocalPolicyRuleGenerationIgnoredFilesSettingDomainPolicySettingLocalPolicyvaluefilePathpathpathTypelogNameeventsTypeseventRecordeventsInformationspublisherInformationfileInformationpolicyDecisionothercmdletpathsuserpackagemessageinnerExceptioninfocontentexceptionlogPathparseEventNeutralResourcesLanguageAttributeSystem.Runtime.InteropServicesComVisibleAttributeSystem.ReflectionAssemblyVersionAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeAssemblyFileVersionAttributeAssemblyKeyFileAttributeAssemblyDelaySignAttributeAssemblyTitleAttributeGuidAttributeCLSCompliantAttributeSystem.DiagnosticsDebuggableAttributeDebuggingModesSystem.Runtime.CompilerServicesCompilationRelaxationsAttributeRuntimeCompatibilityAttributeCmdletAttributeop_ImplicitStringIsNullOrEmptyLoadEmptyCmdletShouldProcessPolicyManagerGetPolicyAddMergePoliciesSetPolicyParameterAttributeValidateNotNullOrEmptyAttributeGetLocalPolicyGetDomainPolicyGetEffectivePolicyInvalidOperationExceptionToXmlWriteObjectget_Countget_ParameterSetNameop_InequalityIEnumerable`1IEnumerator`1GetEnumeratorget_CurrentErrorRecordErrorCategoryWriteErrorSystem.CollectionsIEnumeratorMoveNextIDisposableDisposeEnumeratorget_IsFrameworkAppLockerPolicyDecisionIsPackageAllowedContainsFileManagerVerifyFileTypeSupportedIsFileAllowedSearchFilesSystem.TextStringBuilderget_LengthAppendget_CurrentCultureIFormatProviderFormatWriteWarningGetFileInformationKeyValuePair`2get_Keyget_ValueValidateSetAttributeAddRangeGeneratePolicyToStringSetRuleTypesset_GroupNameset_UserOrGroupSidReadEventget_IdContainsKeyget_Itemset_ItemSystem.XmlXmlDocumentLoadXmlXmlNameTableget_NameTableXmlNamespaceManagerAddNamespaceXmlElementget_DocumentElementXmlNodeSelectSingleNodeget_InnerTextConcatset_AppXset_Publisherset_Hashget_HashSystem.IOGetFileNameset_SourceFileNameStringComparisonCompareCharSplitDecodeFilePublisherInformationFileVersionop_EqualityArgumentNullExceptionget_PublisherExistsSystem.Collections.ObjectModelCollection`1ProviderInfoGetResolvedProviderPathFromPSPathget_NameWellKnownSidTypeNTAccountTypeRuntimeTypeHandleGetTypeFromHandleIdentityReferenceTranslateStartsWithget_PackageFullNameEndsWithget_VersionSerializableAttributeget_MessageSystem.CodeDom.CompilerGeneratedCodeAttributeDebuggerNonUserCodeAttributeCompilerGeneratedAttributeReferenceEqualsAssemblyget_AssemblyGetStringSystem.ComponentModelEditorBrowsableAttributeEditorBrowsableStateMicrosoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources.resourcesByXmlPolicyAppx]TestAppLockerPolicyCmdlet-FailedProcessingFile, OMicrosoft-Windows-AppLocker/EXE and DLLns1ns2khttp://schemas.microsoft.com/win/2004/08/events/eventhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0s//ns1:Event/ns1:UserData/ns2:RuleAndFileData/ns2:FilePathk//ns1:Event/ns1:UserData/ns2:RuleAndFileData/ns2:Fqbns//ns1:Event/ns1:UserData/ns2:RuleAndFileData/ns2:FileHashq//ns1:Event/ns1:UserData/ns2:RuleAndFileData/ns2:Package- .appx valueFileSystemECmdletHelper-FailedResolvingPSPathS- APPXMicrosoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources+DirectoryDoesNotExist+FailedOpeningEventLog+FailedParsingEventLogKFailedParsingFilePublisherInformation1FailedResolvingDirectory'FailedResolvingFile'FailedResolvingPath'FailedResolvingUser5FailedSearchingDirectories!FileDoesNotExist?InvalidFilePublisherInformation'MergingDomainPolicy%MergingLocalPolicy5RuleGenerationIgnoredFiles'SettingDomainPolicy%SettingLocalPolicyO'7oArR 9)18V6N5z\V4,     ! ! (((!%%)%-1 % % %- %- %) %)(%(%-(%)%5%$ %5 %5 %$ %$ ((%5(%$%9%= %9 %9 %= %= A(%9(%=$EI$ M( I,Q$ UI,,UY9) 9)  , 9 9 ] Y a ) ) (9(](Y(a()( QQQ19-  eimqmqqmq  $$RSA1gw:މ8e `Y>Ēe??1 3`!g-1 /%}oY5L9EC;&=oGP\dEk*+Ge+] WSetAppLockerPolicyTSupportsShouldProcessTDefaultParameterSetName ByXmlPolicy!! %  Q %?TPositionT MandatoryTParameterSetName ByXmlPolicyzTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetNameByPolicyObjectT Mandatory>GetAppLockerPolicyTDefaultParameterSetName LocalPolicy 0T MandatoryTParameterSetName LocalPolicy1T MandatoryTParameterSetName DomainPolicy4T MandatoryTParameterSetNameEffectivePolicy?TestAppLockerPolicyTDefaultParameterSetName ByXmlPolicy%)     %- - 91 Q-9- 1%CTPositionT MandatoryTParameterSetNameByXmlPolicyAppxhT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetName ByXmlPolicykT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetNameByPolicyObjectlT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetNameByXmlPolicyAppxFGetAppLockerFileInformationTDefaultParameterSetName ByFilePath%5%$QQ5QQ  9I, , , JQQ9(I,,,-9,-(vTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetName ByFilePatheTPositionTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetNameByAppx0T MandatoryTParameterSetName ByDirectory0T MandatoryTParameterSetName ByDirectory -ExeDllWindowsInstallerScriptAppx/T MandatoryTParameterSetName ByEventLog/T MandatoryTParameterSetName ByEventLogNewAppLockerPolicy%=%9 AQ9Q9Q999AQ999 Q= 1AXTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameI$  U Q$ I,U$,       Y a  9$),!  ))Y99Q 9=! =Q% A1IM QI ! 1E ]Ya@3System.Resources.Tools.StronglyTypedResourceBuilder4.0.0.0 e em q men/*Microsoft (R) Windows (R) Operating System>9Copyright (c) Microsoft Corporation. All rights reserved.Microsoft Corporation6.3.9600.16384D?d:\wbrtm.public.x86fre\internal\strongnamekeys\fake\windows.snk>9Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets)$4F0680DD-8534-4e28-8CEF-6E298EF1481BTWrapNonExceptionThrowsnRVqRSDSD1{I LI Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.pdbH^ P_CorDllMainmscoree.dll% 0HX4VS_VERSION_INFO@%@%?DVarFileInfo$Translation0StringFileInfo 000004b0LCompanyNameMicrosoft Corporation:FileDescriptionMicrosoft.Security.ApplicationId.PolicyManagement.Cmdlets@FileVersion6.3.9600.16384>InternalNameMicrosoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll:LegalCopyrightCopyright (c) Microsoft Corporation. All rights reserved.>OriginalFilenameMicrosoft.Security.ApplicationId.PolicyManagement.Cmdlets.dllx+ProductNameMicrosoft (R) Windows (R) Operating SystemDProductVersion6.3.9600.163848Assembly Version6.3.0.0 p0