MZ@ !L!This program cannot be run in DOS mode. $x=nnnnnnCnnnnnnnnnnnnnRichnPEL,R!  H0VP]&$ \.text `.data@.idata @@.rsrc&(@@.reloc @B_,,R%ttHWINTRUST.dllbcrypt.dllAUTHZ.dllG@F@YE@I@ZXWM]iOxT " lD^;Fd$NULLNULLappid-EnableV2appidapi.dllmsft:rm/event/policychangedAPPX\SystemRoot\System32\AppLocker\.AppLockerSrpIsAllowedEXESRP}zhogAWwK\[%2.2xAPPID://PATHAPPID://SHA256FLATHASHAPPID://SHA1HASHAPPID://SHA256HASHAPPID://FQBN,. "$&|ԂblOm:AppxSignature.p7x%s\%sAPPX-\%u.%u.%u.%02u\??\\??\UNC\\\  $&|ٸX[Pfc8и\Registry\Machine\System\CurrentControlSet\Control\Srp\GP\LastWriteTimetvPz!o6:""2.5.4.102.5.4.72.5.4.82.5.4.6O=, L=, S=, C=%PROGRAMFILES%\Registry\Machine\Software\Microsoft\Windows\CurrentVersionProgramFilesDirProgramFilesDir (x86)%OSDRIVE%%WINDIR%%SYSTEM32%%WINDIR%\System32%WINDIR%\SysWOW64%REMOVABLE%%HOT%\\.\MountPointManagerD&k6fc$SHA256Microsoft Primitive Provider1.3.14.3.2.262.16.840.1.101.3.4.2.1HashDigestLengthObjectLengthCATADMIN,RB2%o]& OriginalFileNameProductName\VarFileInfo\Translation\StringFileInfo\%04x%04x\,Framework@BXfA\bǁ IQCמv{uselect * from Property where Property = 'ProductName' OR Property = 'ProductCode' OR Property = 'ProductVersion' ProductCodeProductVersion.\RSDS&r]NJ0appidapi.pdbUES3Vu EWtHtjWXHÊ#u WSWSEUFt Nt^~VF3_^[]̋UQQV5 W|,FePjjEMPjQVhN 6u_^]̋U} SuU3|  ljh0ug} ua39tVWSh05  ;t(F F tv v^^ 6u= _^3@[] jjhhԤxxx x3@ ̋U,3ʼnEE3S] E܋EE3VWM}쫉M䫫zuF#uut\}3tU9tQ9EtLt SEPUGEPMۋP#IExM׉M3 t XM_^3[s]̋U$VW3}3uܫ}ES9utS] tL93tH9utC t>uEPUMeExEӋMM.}E t X [y  E_^] ̋UMt X]̋UVutNNz^]̋U}tQ} tK}tEu3EEEEEPu EPuUuMu;%jWX]̋US]VWt}utvSEPU EPMx[EuK3Qff;u+ MMw ME0uыS  t_^[] ̋US]VWty} trSEPUM x[EuK3Qff;u+ MMw ME 8uыS:  _^[]̋UMt]̋UVj^tv x=3t-S]W++ٍt ft fJu_[ut3f^]̅x3Ë%=ut ȋ̋Vx3^V==u^̋UjjEPQRj+u u ] ̋UEVW3t 9xtj ZtHu8tf98uDWRQjPjEPVhHj+u u0_^]̋UEV3t 9ptj ZtHu8tf90uDVRQjPj h(jhHj+u u0^]̋USVWjXjfD$3XjfD$XjfD$XhWWhD$$PfD$*D$,pt6  APqqj L$!#3ۋCy 9=u QQT$ #WWWW u9$   t^AtUPqqj 7Phy4  t%AtPqqj HY_^[]̋V395Ȥt5Ȥ5Ȥt,95tPh5P(5 Ĥ tRQ55Ĥ^̋Ut3ĉ$pSVWjXfD$||$fjXfD$~33ufD$d L$\\$\$\$Rf\$V\$ \$\$\$&f\$*\$2f\$6\$:f\$>\$Df3f$$\$@\$X\$HCDŽ$PL$ T$\$Lf3fD$PfD$$fD$0fD$8>f~09FhvYYu>3҈\$ 9Vu Nu9VuF F$t t9Vt9V(t#~ t~ u~u j5puL$|< y 3h $\v$\xnh$\xWvD$hPӍ$XPD$pPӍL$d-y6 = t@tL$dQWppj YL$ T$cD$x3ɊT$ AL$H@ 8u3 = @L$dQQpp h $l8$hV`h$lEV$PӍ$hP$PӍ$,y3 = @$QWppj$39Y 9YSSh5Ĥ5d\$L~ |$ tu.3PPjPjQv|$ u3|$ D$~t vD$TPӋL$x$IC ND$PPɍD$X#ȋ@ = @WpHpjY~tvD$4PvD$(PӋ^ F$ND$@PT$H|$@jhjjjhWD$\u*5$օ ֋a֋LL$XQQQ0|$,t \$L$ T$|$DD$0wPwD$(PӋ_G D$`L$0D$83PL$ q+t(]+مt< ft f9NHuu3f_^[]̋Vhjh@i 5xE%WФ3jh<P(x r؅_x3 ^̃=Фt tjP$%%Ф7d0Qjp|d0Qjpx̋UjQRj+u u]̋UD3ʼnESVWjUjMEQM3QPly3 = @Vpdpj Y9]M `؅QWEЉ}PuEȉ}SPWWWutuWWupuȅy3 = @@6Vpdpj Y;ApPF{CC;CU;C =xKk;h;`ˉ}9{ Q;U؋Up9UgyZQ Q;QU؋UE9U<y /QQ;QU؋U9UyE܃@E;C nKˉM܀9f9A|yr9yi9y `Q T9S/X;A!\;A`;AB;;C< D E;C хt7+H;r~H;KwvJMȉM;ȋMrcE;Cw[UG;}rɋEĉ8 = t@tuppj dY tM_^3[^]á = t@tWppj뵡 = t@tppjdYX뙡 = t@tppjס = m@cppj볡 = I@?ppj 돾;39t9At 9A t 9At 9At 3VW3F#Ɖ#ƉB#ƉB ##ΉB_J^̋UjjZREPREPREPREPQhPj+u u8]̋UESV3ۋWt 9Xtj ZtHu8tf9uDSRQjPWVj+u u(_^[] ̋UMVtэrBu+BjZuHjRQj hPj+u u ^] ̋UQd0SVWh3MWp|uQhWVmcE0Nh FHFD3@M^F@f1_^[]̋VttW39~FhD$38t׋؉\$D$GD$rӃ= ugG ta33>PhtjAX+PD$LPM G;rы= \$ tG tD$@Pww= D$xtl} VPQQN = x0 t1Gt+PPwwj YC=  sL$yTG}AV NPPPPPPsB= t. t&G@t PPwwj Y= t2 G@t PPwwjYS=  tuG@t0PQPRwwjY=  t7G@t1PQPRwwjYuL$yt ؅x4jZL$39L$A39Fh!IJu$_^[3V]̋UQeEVWPuxu U6x3tq_^]̋U SVW3Ef9u PWWh^@9^U~f9EqRU׋]EE%E"E\E*E?f;Etf;Etf;Et9}u f;Etf;EuANuҋu߅EH=v2UffFvȉNuN>~]j%E0E7ZCf;t+j"^f;t#j\^f;t}uj*^f;t j?^f;tfBfqC$< sfEfEf€ sj0j7Zfj%fAZMx3f_^[]̋USVWMf3f3!U!7!wEf9EAMj%ME%^f90uBIuQ^k;s +fCfGv3ЉWuV3ۋEˋ@Hf;Eu+E;3fE@ HBxfCf;]r3fyOt ''g_^[]̋SVW3Ɉ "w0r 9ww,0 Ar Fww,7arfww,WFr _^[̋UE V3t=v x5S]3WxEPuWSx;wu _[ tM^]̋USVWU3EWM}QhPlztM؉]SEPhuluWE}PWShzuM v MɉEQ;sZ";sPEPWuht 2w ;uh`uhSWEt]x E8Ett_^[]̋Ud0SVWj83MWpu|؅u j8WSSE  E=v REuQvPS6uMj\XfPqVmSEKj\XWfFFEffC EC EQE QChS3jXfBK(FB3rZB fC*Ef1s,S0 _^[] ̋UE Vj^t=v x7S]3WxEPuWSx;wu 3f{_[ tM3f^]̋UQQVj^EuPVhEPQ`9uu9ut^]̋UESV3ۋWt 9Xtj ZtHu8tf9uDSj]SRQjPWVj+u u0_^[]̋U,3ʼnEVE3҉U܉UfUfEԍEԉE؋FEEEPjh5ĤU5y)  tAtPVq@qj YM3^I]̋U$3ʼnEESVW}E Qu 3u؉ \8u9]uE9]uE3hP(PP Dž0ff(3,4A3ɉ8‰<Dω@ y 3UH3jL fTfXBUhp\ fdfxBEEl ftfEB EȋEЍ|}}}}}ĉ}̉}ԉE؉}X}}}DžPDž`EEDžEEE 6XЋϋ3EE$jEUXuuuEu3~9FDjh0WdjXf9GG@ff;fGH2؅WJQr SMG PP‰PPRhCj2P CAff;u+щE3MEM]MEM@;F(Pj u uyD3ظ  t#BtPrr@jY t`tUtJM_^3[RE] ̋UT3ʼnEESVuWE Qu 3u؉ff\P(u9]uE9]uEh3WPK Džf‰fAΉ $y33U(jX 0ff8BUHPj f,fXBhpffEE^EE@`uuuu4]̋U SVWjVPډE3PtjVPEPMfUf+fffCu lȃv $UȉMKuEPrQVEE+PFHMPEAP-E  NK_^[]̋UQQESVWU3҉Mj _t 9Pt߅tpu8tf9uDEMt9Qt9tQu8t 3f9EuDjSVjPWRjQuuj+u u8_^[]̋UDSVW3ۍEP]]]`Pd9]t EP\EMG_E]E@EEȉ]Љ]Eigj jEPEPhEPLCuEPjHC rɅyW4u!d03j Vp|ЉWt{n = tp@tgVuppj YMNM_Zy;w uQQ,2d0j jp|;t jY3}t uD}t EPX_^[]̋U,SVWE EGM Ĥ}xMt}u}t}t(  ;tBAt=uWqqj YN#  ;tAtWqqj Y U%=0==tV=t-= ;Aqqjr;uAhqqjP;tZAtQqqjYc 6;t"Atqqj Y; }tWkEzfG fEfEftG3E܅t*;t&AtEغPqqjY fGfEfEft UGB3Et$;t AtEPqqjYTfGUfEfEft BEe3ɍGAuEuuPEPE%;Aqqj;Aqqj=@=P=`tg=ptI=t+;ARqqjY|;txAtoqqjZ;taAtXqqjC;tJAtAqqj,;t3At*qqj;tAtqqjY(u3uuPP}Puuu_^[]̋U VWE3PQuQ}tj^duu PVVVP tVPtߋHUt}uuVuuh}tM t3_^] ̋U3ʼnES]3VWj4PlPEkŪEDEЌEO•Dž >3Džl4\Džx 3DžA|d\lPEDž\Pj`u EjPPVu $jjPtރPjEP3$h WP< Dž WPSj4lWP< Džl43Dž4j Y󫍅Dž4(<3E؉@LPjXx43@D|lPEȉHPjPWEP؅$tWStjM_^3[c4] ̋UH3ʼnEVEkŪEDEEO•t1j4EjP:; E4EEuPEPjM3^3]̋U SV3M‰uWEދSWu VPQ؅w}tq9uu w NuBj^sff;uftfPf;QufuދtE8E@EsEMj jo^$t_^[] ̋U,SVW3EEEىEEEEPh QjZt gEPhQjZt AEPh QjZt EPh(QjZrt }}u}u }3E؋Ѕu]Kff;Eu+h0uUEt:uȍQff;Eu+ʃh8uEUtAu ȍAEff;Eu+MhDju^UEt=uȍQff;Eu+ʃ!hP&uUu"wU v3t9UBU7EPE3PMybj^aZ]tblWWEPQjZu27EPE3PMSx]t&tt 3}tMEtEtEt_^[]̋US3Vtv x;ʋWtf9tIut+ _xQu+Q C^[]̋UW3t)E SV+tft fNJu^[u3f_] ̋U3tv x QuQ t3f]̋U3ʼnESډMV3{veWjX}hEPQܠ=$u׋t x){t#SEPuܠu׋t _M^3[S.]̋U VW3U3uEt E3tw^tQEMQPWjjVu'$zuE$t 3#uEu뉾xE83t_^]̋U VW3U3uEt WE3tw\*tOEWMQPjVȠu'$zuE$t 3#uEu닾xE83t_^]̋U4VjYjZjXjfD$Xj"fL$$fL$Yj$fD$Xj0jhfT$.D$0DD$ XfT$D$lfL$4fD$6D$8fL$D$@3 h @$̤h($`Pdh0!D$Pj T$L$x~D$֋D$j XfxNj ֍L$$x=jT$,L$ x*=tjT$4L$ xx ^]̋U$SVWh <=t33umt =t[EPEPӃeEPEPUxdEPjUMx;LJ(rx h 8_^[]ËMr4u3̃=̤SV5$$;t-W6GtO-GtO;u_3($Ɖ5̤(r 5t; t 5^[̋UeSVWjEWPdt d0jjp|u ]t9UVEy SO9Mtt *GtOEOGEG3@EE6$Y:_^[]̋U$ESV3UW} މMuptwt2jjEPEPQ(MtEMtEEt 4E ؅{j uESPulEt3;v !Mt]E PUt踿U v3茿UMjRPuTME;EsEthfMjZfffAv3 +MjZAvj\_f8C3PAPX(} V3!GJUEJt EUEfBv3赾UBJjQPuTUEJ;su$f;sf{\t "MEt AMwyEtqMQuPju$uM뼅xPU 9 f+ ffOɃv3 ƽUȉOtPrQ' e谽Et袽yC]Kt 舽ctOt tg]t t^#_^[]̋UP3ʼnEESVWjE3hSEE܉EGdtLO Gv3ѼȉOGP5 Q&E !0׋s3Ej EEĉEȍEjPEE@PhE]PLy4 = &@VSppj Y^]EjP3ɍEQQh -PQQQu  y3}u }eE܃ejPj EPh-EPjjju xM(sj(YMwYy؅tNuESj Ph-EP3PPPu xCHtHHtt HHtuE ?}t uDyOt gM_^3[]̋U$SVW3UWhjWjWhEu$~EffQvHQ# ωEt_EM4E;uPSuEh0mPWWWu MEt]APSEj\YM`tbCf9H`Cf9HE?f;Mtf;MuoMf9Hufj\Yf9Hu]fxVuVfx ouOfx luHfxuuAfxmu:fxeu3fx{u,j-Yf9H&u#f9H0uf9H:uf9HDufx^}u 3{f0fSw{uPuWP" MMu(_^[]̋VWf;s3)эJ;~FP\tfujVWP_^̋U4S]3VWM}EEE9Gt1EE PEx PTKM3KM9Gt,EE PE@PECύÉE3҉M399t+ M3@ЉD=EUU Er3uWPd0p|ȉMu {E UE3EE E UuSU}3ȋE+ÉME<(j XE 93P7RwMM3;urw;vVEPWQEPVVVutu3PPupu؅xo3ŰȉUEM <t"3PWu2EM UA M UrɋUM+jXȉU}ME O = tN@ tHVppj Y^2#E x!UEA MU}tMEt޵_^[]̋U SVWe3MjEPjCPhQ,xY}EjPjEPhW,x8Mv3KMCujjjQPSW y_^[]̋V>t 60&Nt f^̋U3ʼnES] MVWM3MUQPhE u$jY3}EEPVEPtjP_WpVPE܃ EE쉅tExEVPppPEDž|EuUЋMWwrtgWEPpPUЅu$t?4Gt( w#9rPwuG #螳M_^3[]̋USVu‹UW}VWuMuuu } ؃uUMVWuuu 3xktf9tV3f9uN3F7PVVhE3P؅x#}tNӲEEF3Gr!3|Ot課3FGr_^[]h\h`_]E EuE3҉PVDžDžQhjRPjPj3QjPQQQPjX3EPPPPhjh\;y(A0A4A8A<PPD\mШ[APPhxhP2O3ff;u+É3 ?3f 4\PPPҋkxctWv3Au]CffAPq 3 3ۋ@j^E3@Ëe苵Etjt DJ̋UQVWjZ3;|If;rAS;w9EPSOIx$MG ;wA;vƍ 83[_^]̋U3SVWjYf9F, f;Шj\YjXf9t:؅fj\}Yf;t fuƉEЋ+CPEPM+MfEfEEjPEPt؋EjXj\YYE 3Nj[NQff;u+VM ftf9~uf;r 0 NEjY_^[]̋SVWff'FDXPܰYtF3ɁfLXfuԍ?f3f#3f;sYFHPܰYt fGff;rft2fff;tN+PPQ if_^[̋UQ3EtwEP-ЋE Mt x!‹]̋USV3ۋWtf9tJuu Et x+8_^[]̋UQVWEP֋xDUjX W+t*S]~+مt< ft f9JNu[u3f_^]̋UHSVW3UfEЋ3fEȍEMPhjQhMMMMMM܉MMMfM։MfMΉMMxtEPj wx_EURuPQxIEURPQx6EURPQx#EURhPQ x }t*}ԃ}}uEURPQ xȋEURPQ xEURPQxEURPQxuEPӍE3PMI}ԋy auE}ăeEЉ}ueEePӍE3PMx}uEeEȋEĉEu؍UuMuؾ뎋M諩uӅt}uW 蒩uӋMtQPMtQPMtQPMtQPMtQPMtQP_^[]̋U3EEEEEPE E@Pu U]̋UQQSVWEE0P3h]}t讨膨EPWVjuutxj~u_jY9NrW~wNFuHfFf+M fFfAw M ؉YuAPF PSO $}t uD_^[]̋UQQeEVPhExjEPjjhu}t uD^]̋U@3ʼnEESىMEVu W3!9!y3ɉHUS fPVSPhPtP=DžPPjӋY,ff;uftfPf;Qufu3u ff;uftfPf;Qufu3uDff;uftfPf;Qufu3PjjӋun ffGv3 ߤGAQPjӋBt t t ts3ۅtEKN?t H&fNt /&fM_^3[.]j^H<3f9hWذYYt3fW԰YChPذYYt3f԰Y% tmChPذYYt3f԰Yt/hSذYYt3fS԰Y% 'hİܤؤYu@à 3̋UQ} SVW@H3@d}PʉU 33C;thPU 3u]=t juYKܤE t^5ؤ؉u;r09>t>Ћܤ ؤ;uE 9Mt׋‰MډE PȰ3ۉ=ؤY=ܤC=9}333C9] d3} PU;thPU3u] 9=j_t j1hh )YYuhhmY=} Yu3=thYt uWu@_^[] ̋U} uh]*̋Ucsm9Eu u PYY]3]j,hE3uE w} u=@uuE t tFE} u Duu uЉEMEQPMYYËe3uu}Euu u(EMEQP YYËe3uu}qEuu uEMEQPYYËe3uu} }EVVuՋMEQPYYËe3uEVVumMEQPRYYËe3ut,EVVuMEQPYYËe3uE t Euu uEMEQPYYËe3uut?=Dt6Euu uЉEMEQPYYËe3uuE E } w ̋UVu3utу;u r^]; u4̋UjHuLh `PD]̋U$H D@<58=4f`f Tf0f,f%(f-$XELEPE\PTH LXjXkǀ\jX \jX \jXk LjX LhX]̋UH D@<58=4f`f Tf0f,f%(f-$XEPE\PTH LXjXkǀ\hX]%а%̰̋UE3SVWH<AYt} p ;r H;r B(;r3_^[]̋UjhhdPSVW1E3PEdeEhtTE-PhPt:@$ЃEMd Y_^[]ËE3Ɂ8ËeE3Md Y_^[]̋UEMZf9t3]ËH<39PEu f9Q]̋UeeVWN@;t t УjEP8E3EEx1E<1E43EM3EEP@E3EM3;t5uO@ щ _^]%hd5D$l$l$+SVW1E3PeuEEEEdËMd Y__^[]Q̋Uuuu uh h ]%̸QRPhZY̸ ̸̸̸̸̸̸̸w̸h̸(QRPh<ZY̸$̸,̸ ̸̸̸0̸QRPh\rZY̸̸̠Р̸Ԡ̸ؠ̸ܠ̸̸Ƞ̋Uju hԗ5uh]%0%,hd5D$l$l$+SVW1E3ʼnEPeuEEEEdËM3^%%0Ds͏1cw+>`dܜphlȠ( 4Vx Ě nN,0ƛlNڛWTHelperProvDataFromStateDataWTHelperGetProvSignerFromChainWTHelperGetProvCertFromChainWinVerifyTrustCryptCATAdminCalcHashFromFileHandleCryptCATAdminAcquireContextCryptCATAdminEnumCatalogFromHashCryptCATCatalogInfoFromContextCryptCATAdminReleaseCatalogContextCryptCATAdminReleaseContextBCryptOpenAlgorithmProviderBCryptCloseAlgorithmProviderBCryptGetPropertyBCryptCreateHashBCryptHashDataBCryptFinishHashBCryptDestroyHashAuthzFreeResourceManagerAuthziAccessCheckExAuthzFreeContextAuthzInitializeResourceManagerAuthzInitializeContextFromTokenAuthziModifySecurityAttributesAuthziQuerySecurityAttributesAuthzGetInformationFromContext\RȝxV tT՝ (A\sappidapi.dllAppIDConstructAppxAttributesAppIDDecodeAttributeStringAppIDEncodeAttributeStringAppIDFreeAttributeStringAppIDGetAppxFileAttributesAppIDGetFileAttributesAppIDReleaseAppxFileAttributesAppIDReleaseFileAttributesN@D  |,. "$&\\?N]l{}n_PA2#ޖϖ ĸڸֹһlR> xfN>(*| \v0ƴxnbTJ<~dL4 ķtV8 ڶƶv\B*ֵµzbH.Nb0p|"B$rĸڸֹһlR> xfN>(*| \v0ƴxnbTJ<~dL4 ķtV8 ڶƶv\B*ֵµzbH.Nb_wcsicmp_vsnprintf memmove_vsnwprintfiswspacewcsstr_wtolq_XcptFilter_amsg_exitfreemalloc_inittermmsvcrt.dlll_except_handler4_commonEEtwGetTraceLoggerHandleDEtwGetTraceEnableLevelCEtwGetTraceEnableFlagsLEtwRegisterTraceGuidsWSEtwUnregisterTraceGuidsRtlRunOnceExecuteOnceRtlInitUnicodeStringoRtlNtStatusToDosErrorNoTebQEtwTraceMessage8EtwEventRegister:EtwEventUnregister;EtwEventWriteRtlAllocateHeapRtlFreeHeapNtReadFile[NtWaitForSingleObjectNtQueryInformationFileLRtlUpcaseUnicodeStringcRtlEqualUnicodeStringNtQueryLicenseValue6EtwEventEnabledHRtlLengthSidRtlGUIDFromStringRtlPrefixUnicodeString{NtOpenFile#NtDelayExecutionNtCloseRtlInitializeSRWLock|RtlAcquireSRWLockExclusiveRtlReleaseSRWLockExclusiveRtlCopyUnicodeStringNtOpenSymbolicLinkObjectNtQuerySymbolicLinkObjectNtQueryVolumeInformationFileNtQueryObject.NtDeviceIoControlFileNtCreateSectionpNtMapViewOfSectionLdrResSearchResourceQNtUnmapViewOfSectionRtlCompareUnicodeString~NtOpenKeyNtQueryValueKey4NtSetValueKeyntdll.dllADVAPI32.dllKCertGetNameStringWCryptSIPRetrieveSubjectGuidForCatalogFileCryptSIPLoadCRYPT32.dllmsi.dllSHCreateStreamOnFileWSHLWAPI.dllCoCreateInstance{CoTaskMemFreeole32.dllSLRegisterWindowsEvent$SLUnregisterWindowsEventSLC.dllDisableThreadLibraryCallsCreateEventWOGetLastErrorCloseHandleWaitForSingleObjectCreateFileW GetCurrentProcessIdSetLastErrorPackageIdFromFullNameGetPackagePathvIsWow64ProcessGetCurrentProcessWow64DisableWow64FsRedirectionWow64RevertWow64FsRedirection?GetFinalPathNameByHandleWLSleep|UnhandledExceptionFilter=SetUnhandledExceptionFilter[TerminateProcess*QueryPerformanceCounter GetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountKERNEL32.dllDelayLoadFailureHookResolveDelayLoadedAPI memcpymemset(@Xp     WEVT_TEMPLATEMUI4VS_VERSION_INFO@%@%?StringFileInfo040904B0LCompanyNameMicrosoft CorporationdFileDescriptionApplication Identity APIs Dllr)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623): InternalNameappidapi.dll.LegalCopyright Microsoft Corporation. All rights reserved.B OriginalFilenameappidapi.dllj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$Translation CRIM h<NJ"4sL'*иy@?{]`M]iOxT "\ WEVT\hxCHANhLMicrosoft-Windows-AppID/OperationalTTBLTEMPtqʑ* A҂FilePathAndStatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0'FilePath Status $FilePathLength$FilePathBufferStatusTEMP:_RA\MZ"FilePathPublisherNameAndStatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0'FilePath &Ǭ PublisherName Status $Ht$FilePathLength$FilePathBuffer,PublisherNameLength,PublisherNameBufferStatusTEMP8hT&'A| StatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0Status StatusOPCOLEVLdPP4win:Error(win:InformationalTASKKEYWEVNT`( WEVT@    OPCODlX ,AppIdTriggerOpcodeLEVL@P (win:InformationalTASKKEYWH ,AppIdTriggerKeywordEVNTDlL X WEVTt  tTtCHAN d  , TMicrosoft-Windows-AppLocker/EXE and DLL\Microsoft-Windows-AppLocker/MSI and ScriptlMicrosoft-Windows-AppLocker/Packaged app-ExecutionlMicrosoft-Windows-AppLocker/Packaged app-DeploymentTTBL TEMPPF{G,mA RuleAndFileDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0 PolicyName wRuleId gRuleName uGRuleSddl  TargetUser *TargetProcessId 'FilePath jFileHash Fqbn 8`t D h  (PolicyNameLength(PolicyNameBufferRuleId$RuleNameLength$RuleNameBuffer$RuleSddlLength$RuleSddlBufferTargetUser$TargetProcessId$FilePathLength$FilePathBuffer$FileHashLengthFileHashFqbnLengthFqbnTEMP gTgiDZ*݌GARuleAndFileDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0 PolicyName wRuleId gRuleName uGRuleSddl  TargetUser *TargetProcessId XPackage Fqbn <dx$H h (PolicyNameLength(PolicyNameBufferRuleId$RuleNameLength$RuleNameBuffer$RuleSddlLength$RuleSddlBufferTargetUser$TargetProcessId PackageLength PackageBufferFqbnLengthFqbnTEMP8_bh A| StatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0Status StatusTEMP ꡶.O/<0A+V FilePathDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0'FilePath ,P$FilePathLength$FilePathBufferOPCOT22win:Startwin:StopLEVLPRP,win:Errorwin:Warning(win:InformationalTASK $T,SrpPolicyConversion(SrpPolicyRuleSort0SrpPolicyHitCountJoin SrpPolicyLoadKEYWEVNTP@@ AA BB  CC  DD  E@E  F@F  G@G  HH I@H J`K`L`M|N|OPQRST T U U V V WW XX YY ZZ [ Z fSe?"N@6Z"qҘݩ[g* WEVT_TEMPLATEMUIMUI en-US00X0\04143<3D3L33334444$4,444<444788T:X:`::; ;E;K;n;w;;;;;;;;;;;;;; <<<<"<<>(?? '1T111111222'2d2k2s22222222233%3A3G3X3^3w333333333333333344 4'445$55555556A6F66666 7T7Y777777X8]8y888:":>:h:m::/;9;T;Z;n;;!<<< ===&=2=G=M=T=]=g=x==V>o>w>>>>>>>>>>??6?O?v?????000!0:0111?2D2\22222222223333"404F4444456667V777 8*8H8{8888#9@9S9h9w999999;;;\@l2293O3333O444535;556 6X6f6666666777K777~9999:N;k;q;;;M>>]?d???P021S1Y1p11:2b2q2z2222l3z33334 44d4z44444585H5n555555555556666666>7S77n88`9u99999::;;D;y;0a>>>>A???`0d00;2c2r2x22%3/3?33334444444444444455595>5I5P5W5555555556696X6u6~6666667 777$7.7;7c777771868N8l88 9O9a9r9 ::;; <7>??p[0u001112 26222222X333-454C4456i666 77&777&8=8i8888e9l99999:>:G:Q:::;<>?? 1+112U2333344X44667F7g7p777$8=8S8_8v8888859w9_:t::";);=;Y;f;;;;;;;;3<8<=>s>>>>>(0000"1>1G1R1Y1p1v1|1111111111111111112 22+212<2B2N2^2g22222222222222222222333(3:3F33333334444455+585@5R5]5z5555566$636B6Q6`6o6~666666666 77-7@7O7^7m7|777777777 8J8V8t8x88888888888888888899T 00$0<0T0l000000000000000000000111 1111 1$1(1,101$0# *H #0#10  `He0 +700 +70մ$fڎ`1|0x +71hdU}sK.gD](?qi9: OdL3 $ hʃ*'_kU9yZ^uS) V1$ tm%3Vrv$61A㉑-Fۊa ]uWhg41>4(f:-}L|jDq7ueEe/X`*&V'1gV\TVCRl,} 9%й[=ۤOmFL h010  `He pa)q`http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  |qQyn9>\` QfG=*hwLb{Ǻz4KbzJ7-W|=ܸZij:ni!7ށugӓW^)9-Es[zFX^gl5?$5 uVx,Јߺ~,c#!xlX6+̤-@EΊ\k>p* j_Gc 26*pZBYqKW~!<ŹE ŕ]b֠c uw}=EWo3wbY~10001 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113$ hs$0  `He0 *H  1  +70 +7 10  +70/ *H  1" C 65MPwlDΘM0Z +7 1L0J$"Microsoft Windows" http://www.microsoft.com/windows0  *H tbhp01M+L8biTYN;Ped,A*䰔T%MعICROO3oF B0֐q^8>2}pF׉}mjpէ"8%Loafy] Y9C'<ϝqd)ɀvtWÙo˦pm[rG+B;[7e c{G*q$X!D m*{ O5?J0F +71602 *H #010  `He0= *H  ,(0$ +Y 010  `He w:ouݘ$c?gۄ+#KQXwx20130822053016.811Z001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:7D2E-3782-B0F71%0#UMicrosoft Time-Stamp Service0q0Y a *0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0  w: iktTե |hK,_av>f+[S'1A |a0Y0D`TC M8Bݓs0W&E GͿ$`2X`FXG2tag_TϓLĦ]an(aF'$gr!KdPb]w=WuBM@Q>gfD~Knʱz* 1N5xhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  Q ?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z?yJR8/ye٩kzoK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm8ؔƥ B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰPo1:eGxHr~akow˧ 9؂r*T9[ Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YDhttp://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U00U% 0 +0  *H  =/ TN:?G>T9uGH^3(b9Z9Ǹd)zO|br0Nʣ DGu q.QB䂃_|PDᅐPiu)cXӆb:F!s }BSe}^$T@{#OD1Inds:FiK[QE`T79GE~,R3O?_yV 8 v0^0㡁01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:7D2E-3782-B0F71%0#UMicrosoft Time-Stamp Service% 0 +3XV\xd001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:B027-C6F8-1D881+0)U"Microsoft Time Source Master Clock0  *H տٝ0"20130822002813Z20130823002813Z0t0: +Y 1,0*0 տٝ0]00 +06 +Y 1(0&0  +Y  0` 0 0  *H 54t&iƪFb=mli4eޱt D|d3:+rzOͰ t&D%[3%}g}oePQfw|RqX]?b׎}Wi9n Ȃ$MkдJIQsTXDel~Pgz;x/Ymgf:p7 \̵f2= Gwյҵ* \+I~V 1000|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103-%_-0  `He20 *H  1  *H  0/ *H  1" ~KX=q Sϙu `7%9"=0 *H   10003XV\xd00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103-%_-0#cEOk6iЮm"l0  *H  !Z@piT[HwPduդdv63˖zЊ,*ϱ.e<@i7׸CV.X݉rKtJW5"/4tO3xPǖ-!f