/éŢ |  2)ę  | C:\WINDOWS\Security\Database\C:\WINDOWS\Security\Database\@,€~đ%ƒđ{ aa |ť 1C:\WINDOWS\Security\Database\C:\WINDOWS\Security\Database\@,€~đ |ť şíĐ |ť R C:\WINDOWS\Security\Database\secedit.sdbG x fâĘZĘZ |ť DţI˙˙˙˙˙˙˙˙ţ  !JI  çS˙˙˙˙˙˙˙˙ !TJ  â]˙˙˙˙˙˙˙˙ !^S  g˙˙˙˙˙˙˙˙  @!h^    q˙˙˙˙˙˙˙˙  @rS ťo˙˙ -€€€€ PŔ˙ MSysObjects sq ˝o˙˙  ˙MSYSOBJECTS€€€tg żo˙˙ €€MSYSOBJECTS€€€u] Áo˙˙ -€€€€ PŔ˙ MSysObjectsvr Ăo˙˙ /€€€ €#ä*€ţ ObjidTablewt Ĺo˙˙ €€OBJIDTABLE€€€xu Ço˙˙ /€€€ €#ä*€ţ ObjidTableyv Éo˙˙ )€€€ €#ä*€ţTypezw Ëo˙˙ €€TYPE€€€{x Ío˙˙ )€€€ €#ä*€ţType|y Ďo˙˙ '€€€ €#ä*€ţId}z Ńo˙˙ €€ID€€€~{ Óo˙˙ '€€€ €#ä*€ţId| Őo˙˙ %€€€€€€ ˙ä€Name€} ×o˙˙ €€NAME€€€€~ Ůo˙˙ %€€€€€€ ˙ä€Name‚ Űo˙˙ 4€€€ €#ä*€ţColtypOrPgnoFDPƒ€ Ýo˙˙ €€COLTYPORPGNOFDP€€€„ ßo˙˙ 4€€€ €#ä*€ţColtypOrPgnoFDP…‚ áo˙˙ /€€€ €#ä*€ţ SpaceUsage†ƒ ăo˙˙ €€SPACEUSAGE€€€‡„ ĺo˙˙ /€€€ €#ä*€ţ SpaceUsageˆ… ço˙˙ *€€€ €#ä*€ţFlags‰† éo˙˙ €€FLAGS€€€Š‡ ëo˙˙ *€€€ €#ä*€ţFlags‹ˆ ío˙˙ 2€€€ €#ä*€ţ PagesOrLocaleŒ‰ ďo˙˙ €€PAGESORLOCALE€€€Š ńo˙˙ 2€€€ €#ä*€ţ PagesOrLocaleŽ‹  óo˙˙ &€€€€ ˙ä€StatsŒ őo˙˙ €€STATS€€€  ÷o˙˙ &€€€€ ˙ä€Stats‘Ž ůo˙˙ -€€€ €#ä*€ţRootFlag’ űo˙˙ €€ROOTFLAG€€€“ ýo˙˙ -€€€ €#ä*€ţRootFlagŰCWŽwŽw |ť ”‘  ˙o˙˙ .€€€‚€‚ ˙ä€ TemplateTable•’  p˙˙ €€TEMPLATETABLE€€€‚–“  p˙˙ .€€€‚€‚ ˙ä€ TemplateTable—”  p˙˙ 1€€€ €# ä*€ţ RecordOffset˜• p˙˙ €€RECORDOFFSET€€€ ™–   p˙˙ 1€€€ €# ä*€ţ RecordOffsetš—   p˙˙ -€€€ƒ€ƒ ˙ä€ DefaultValue›˜  p˙˙ €€DEFAULTVALUE€€€ƒœ™  p˙˙ -€€€ƒ€ƒ ˙ä€ DefaultValueš p˙˙ *€€€„€„ ˙ä€ KeyFldIDsž› p˙˙ €€KEYFLDIDS€€€„Ÿœ p˙˙ *€€€„€„ ˙ä€ KeyFldIDs  p˙˙ *€€€…€… ˙ä€ VarSegMacĄž p˙˙ €€VARSEGMAC€€€…˘Ÿ p˙˙ *€€€…€… ˙ä€ VarSegMacŁ  p˙˙ 3€€€†€† ˙ä€ConditionalColumns¤Ą p˙˙ €€CONDITIONALCOLUMNS€€€†Ľ˘ !p˙˙ 3€€€†€† ˙ä€ConditionalColumnsŚŁ  #p˙˙ /€€€ €# ä*€ţ LCMapFlags§¤ %p˙˙ €€LCMAPFLAGS€€€ ¨Ľ  'p˙˙ /€€€ €# ä*€ţ LCMapFlagsŠŚ  )p˙˙ ,€€€ €# ä*€ţKeyMostާ +p˙˙ €€KEYMOST€€€ Ť¨  -p˙˙ ,€€€ €# ä*€ţKeyMostŹŠ /p˙˙ ,€€€‡€‡ ˙ä€ TupleLimits­Ş 1p˙˙ €€TUPLELIMITS€€€‡ŽŤ 3p˙˙ ,€€€‡€‡ ˙ä€ TupleLimitsŻŹ 5p˙˙ (€€€ˆ€ˆ ˙ä€Version°­ 7p˙˙ €€VERSION€€€ˆąŽ 9p˙˙ (€€€ˆ€ˆ ˙ä€Version˛Ż ;p˙˙ '€€€‰€‰ ˙ä€SortIDł° =p˙˙ €€SORTID€€€‰´ą ?p˙˙ '€€€‰€‰ ˙ä€SortIDľ˛ Ap˙˙ -€€€€ ä€ CallbackDataśł Cp˙˙ €€CALLBACKDATA€€€ˇ´ Ep˙˙ -€€€€ ä€ CallbackData¸ľ Gp˙˙ 5€€€€ ä€CallbackDependenciesšś Ip˙˙ €€CALLBACKDEPENDENCIES€€€Lt:şˇ Kp˙˙ 5€€ĆúrÂ<3<3 |ť M:€€ ä€CallbackDependenciesť¸ Mp˙˙ +€€€€ ä€ SeparateLVźš Op˙˙ €€SEPARATELV€€€˝ş Qp˙˙ +€€€€ ä€ SeparateLVžť Sp˙˙ +€€€€ ä€ SpaceHintsżź Up˙˙ €€SPACEHINTS€€€Ŕ˝ Wp˙˙ +€€€€ ä€ SpaceHintsÁž Yp˙˙ 5€€€€ ä€SpaceDeferredLVHintsÂż [p˙˙ €€SPACEDEFERREDLVHINTS€€€ĂŔ ]p˙˙ 5€€€€ ä€SpaceDeferredLVHintsÄÁ _p˙˙ +€€€€ ä€ LocaleNameĹ  ap˙˙ €€LOCALENAME€€€ĆĂ cp˙˙ +€€€€ ä€ LocaleNameÇÄ  ep˙˙ /€€€ €# ä*€ţ LVChunkMaxČĹ  gp˙˙ €€LVCHUNKMAX€€€ ÉĆ  ip˙˙ /€€€ €# ä*€ţ LVChunkMaxĘÇ  kp˙˙ 7€€€ €# ä*€ţPgnoFDPLastSetTimeËČ mp˙˙ €€PGNOFDPLASTSETTIME€€€ ĚÉ  op˙˙ 7€€€ €# ä*€ţPgnoFDPLastSetTimeÍĘ qp˙˙ 3€€€€ PŔ˙MSysObjectsShadow Îs sp˙˙  ˙MSYSOBJECTSSHADOW€€€ĎË up˙˙ €€MSYSOBJECTSSHADOW€€€ĐĚ wp˙˙ 3€€€€ PŔ˙MSysObjectsShadowŃÍ yp˙˙ /€€€ €#ä*€ţ ObjidTableŇĎ {p˙˙ €€OBJIDTABLE€€€ÓĐ }p˙˙ /€€€ €#ä*€ţ ObjidTableÔŃ  p˙˙ )€€€ €#ä*€ţTypeŐŇ  p˙˙ €€TYPE€€€ÖÓ  ƒp˙˙ )€€€ €#ä*€ţType×Ô !…p˙˙ '€€€ €#ä*€ţIdŘŐ ‡p˙˙ €€ID€€€ŮÖ !‰p˙˙ '€€€ €#ä*€ţIdÚ× "‹p˙˙ %€€€€€€ ˙ä€NameŰŘ  p˙˙ €€NAME€€€€ÜŮ "p˙˙ %€€€€€€ ˙ä€NameÝÚ "‘p˙˙ 4€€€ €#ä*€ţColtypOrPgnoFDPŢŰ “p˙˙ €€COLTYPORPGNOFDP€€€ßÜ "•p˙˙ 4€€€ €#ä*€ţColtypOrPgnoFDPLnTŕÝ #—p˙˙ /€€€ €#vrÚ_E_E |ť Mä*€ţ SpaceUsageáŢ #™p˙˙ €€SPACEUSAGE€€€âß #›p˙˙ /€€€ €#ä*€ţ SpaceUsageăŕ $p˙˙ *€€€ €#ä*€ţFlagsäá  Ÿp˙˙ €€FLAGS€€€ĺâ $Ąp˙˙ *€€€ €#ä*€ţFlagsćă %Łp˙˙ 2€€€ €#ä*€ţ PagesOrLocaleçä $Ľp˙˙ €€PAGESORLOCALE€€€čĺ %§p˙˙ 2€€€ €#ä*€ţ PagesOrLocaleéć 'Šp˙˙ &€€€€ ˙ä€Statsęç &Ťp˙˙ €€STATS€€€ëč '­p˙˙ &€€€€ ˙ä€Statsěé &Żp˙˙ -€€€ €#ä*€ţRootFlagíę %ąp˙˙ €€ROOTFLAG€€€îë &łp˙˙ -€€€ €#ä*€ţRootFlagďě )ľp˙˙ .€€€‚€‚ ˙ä€ TemplateTableđí (ˇp˙˙ €€TEMPLATETABLE€€€‚ńî )šp˙˙ .€€€‚€‚ ˙ä€ TemplateTableňď 'ťp˙˙ 1€€€ €# ä*€ţ RecordOffsetóđ %˝p˙˙ €€RECORDOFFSET€€€ ôń 'żp˙˙ 1€€€ €# ä*€ţ RecordOffsetőň +Áp˙˙ -€€€ƒ€ƒ ˙ä€ DefaultValueöó  Ăp˙˙ €€DEFAULTVALUE€€€ƒ÷ô +Ĺp˙˙ -€€€ƒ€ƒ ˙ä€ DefaultValueřő ,Çp˙˙ *€€€„€„ ˙ä€ KeyFldIDsůö #Ép˙˙ €€KEYFLDIDS€€€„ú÷ ,Ëp˙˙ *€€€„€„ ˙ä€ KeyFldIDsűř -Íp˙˙ *€€€…€… ˙ä€ VarSegMacüů -Ďp˙˙ €€VARSEGMAC€€€…ýú -Ńp˙˙ *€€€…€… ˙ä€ VarSegMacţű .Óp˙˙ 3€€€†€† ˙ä€ConditionalColumns˙ü  Őp˙˙ €€CONDITIONALCOLUMNS€€€†ý .×p˙˙ 3€€€†€† ˙ä€ConditionalColumnsţ (Ůp˙˙ /€€€ €# ä*€ţ LCMapFlags˙ %Űp˙˙ €€LCMAPFLAGS€€€  (Ýp˙˙ /€€€ €# ä*€ţ LCMapFlags )ßp˙˙ ,€€€ €# ä*€ţKeyMost %áp˙˙ €€KEYMOST€€€  )ăp˙˙ ,€€€ €# ä*€ţKeyMostLk čŒWă:E |ť MO1ĺp˙˙ ,€€€‡€‡ ˙ä€ TupleLimits /çp˙˙ €€TUPLELIMITS€€€‡  1ép˙˙ ,€€€‡€‡ ˙ä€ TupleLimits! h    >   ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙23˙˙˙˙‚Ą€&  AAË 3x €(€V€:€ ’*PŔÁ˙ MSysObjectsôâސ €#ŞčŰYä@*€ţ ĐidTableďď0i_đ)ˆ:ďTypżż™PżCIdŻ€€ˆ€h _`˙­€NamOOJColtypOrPgnoFDŕ_PŮ ¨S SpaceUsagď0(€ďFlaź ˆWgĎ Ç(XÇc P€sOrLocaç w `( q €đř StaŻ@¸jĄŞRoot‘ß‚‡‚(ý Ů€ TemplateW Ç@Iąiá RecordOffset˙ƒ+¸ç0ƒ(ç DefaultValuß„ß„(ßW KeyFld€V+IDo …ǐ…(ÇVarSegMacdždž(ÇWnditionWţ"alčumn×  PA   z LCMapI ď ďP (iX°˘îŠMosG ‡×p‡(× TupleLimiçˆ×ˆ(×GVŔ'Ŕers˜ˇ‰ˇp‰(ˇSortIDŻŻ`2Ş CallKŞbackDataßßß ßependenciegJ!€•X eparhLVĎĎĐĎa#Hin ĎĎšËHerredLVŔ_Ż  b#_+ § (`ɢčVChunkMaxď ď (v­ňé#î -LastSetTi\8Y8á!*]8á-˙P_8S˙˙˙hadow:Š8ŮŘ(ĐY>8íŠ8ëYKď%8˝Š8k)Pż8­˙˙˙˙Š8y8ß Š8›J8Š8Ą ¨$8íŠ8ë8˙ ĹŠ8Ï8Š88o ˙˙˙˙ĽŠ8ŁyiĄŞ8ÝŠ8ۏ8ŻĺŠ8ăIKá8ýŠ8Ť8˙ÝŠ8ۏ8 Ĺř˙˙˙Š8Ï8˙ ĹŠ8Ï8 Š8 A   z đ#8őíŠ8ë‘'8 ŐŠ8ӏ8˙  ˙;;€+BŐ*9œc*<'*=Ş)59)4 (;U+>+@ç)<n)Ař(9ż(>(C>(6Ô'8œ'>^'B':^&D&:ŕ%:Ś%Db%<&%6đ$7š$;~$BĂ#9ŠQ#<#=˜"5'"4ř FÖ&>˜&;C$>$@Ő"<\"Ać!9­!>o!C,!6 8Š >L <˙˙˙  ˙˙˙˙˙˙˙˙ 2ëp˙˙ (€€€ˆ€ˆ ˙ä€Version  C  2íp˙˙ €€VERSION€€€ˆ!]   >  ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙23˙˙˙˙…€ & AA Ë 3x €U€:€ °*PŔ ˙ MSysObje€€^ctsސ €#ŞčŰYä@*€ţ ĐidTable á žďď0)ˆ:ďTypżż™PżCIdŻ€€ˆ€hŕ , ˙­€NamOOJColtypOrPgnźŕ oFDP9 ¨S SpaceUsagď0(€ďWń FlagĎ Ç(XÇc P€sOrLocaç w `( q ^€StaŻ@¸jĄŞRoot‘ß‚‡‚(ý Ů€ŕ/ TemplateW Ç@Iąiá RecordOffse`Wt˙ƒç0ƒ(ç DefaultValuß„ß„(ßW KeyĐ `FldIDo …ǐ…(ÇVarSegMacdždž(ÇWnditjŔ_ionalčumn×  PA   z LCMapI ď ďP (+VôiîŠMosG ‡×p‡(× TupleLimiçˆ×ˆ(×GřXVers˜ˇ‰ˇp‰(ˇSortIDŻŻ`2Ş C @allbackDataßßß ßependencieg°+aJ!eparhLVĎĎĐĎa#Hin ĎĎšËHerreřëdLV  b#_+ § (`ɢčVChunkMaxď Ž@žď (é#î -LastSetTi\8Y8á!*]8á-˙˙˙˙ŔP_8Shadow:Š8ŮŘ(ĐY>8íŠ8ëYKď%8˝Š8k)P˙˙˙˙ż8­Š8y8ß Š8›J8Š8Ą ¨$8íŠ8ë8˙ ĹŠ8Ï8˙˙˙˙Š88o ĽŠ8ŁyiĄŞ8ÝŠ8ۏ8ŻĺŠ8ăIKá8ýŠ8Ť8˙ÝŠ8˙˙˙˙ۏ8 ĹŠ8Ï8˙ ĹŠ8Ï8 Š8 A   z đ#8őíŠ8ë‘'8 ŐŠ8ӏ8˙  ˙;;+BŐ*9œc*<'*=Ş)59)4 (;U+>+@ç)<n)Ař(9ż(>(C>(6Ô'8œ'>^'B':^&D&:ŕ%:Ś%D@b%<&%6đ$7š$;~$BĂ#9ŠQ#<#=˜"5'"4ř FÖ&>˜&;C$>$@Ő"<\"Ać!9­!>o!C,!6 8Š >L ˙˙˙< ˙˙˙˙˙˙˙˙ 2ďp˙˙ (€€€ˆ€ˆ ˙ä€Version C   3ńp˙˙ '€€€‰€‰ ˙ä€SortID ,óp˙˙ €€SORTID€€€‰Lf0 3őp˙˙ ČdZ‡Ě/3P |ť M6'€€€‰€‰ ˙ä€SortID  4÷p˙˙ -€€€€ ä€ CallbackData ůp˙˙ €€CALLBACKDATA€€€ 4űp˙˙ -€€€€ ä€ CallbackData  5ýp˙˙ 5€€€€ ä€CallbackDependencies  ˙p˙˙ €€CALLBACKDEPENDENCIES€€€ 5q˙˙ 5€€€€ ä€CallbackDependencies  6q˙˙ +€€€€ ä€ SeparateLV .q˙˙ €€SEPARATELV€€€ 6q˙˙ +€€€€ ä€ SeparateLV!    ">"  ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> " ˙˙˙˙˙˙˙˙ 778˙˙˙˙ €€€€€€ "˙˙˙˙˙˙˙˙ 7 q˙˙ +€€€€ ä€ SpaceHints "C  # 0 q˙˙ €€SPACEHINTS€€€ $   '>' ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙>' ˙˙˙˙˙˙˙˙778˙˙˙˙ €€€€€€'˙˙˙˙˙˙˙˙ 7 q˙˙ +€€€€ ä€ SpaceHints 'C (" q˙˙ 5€€€€ ä€SpaceDeferredLVHints)# 0q˙˙ €€SPACEDEFERREDLVHINTS€€€*' q˙˙ 5€€€€ ä€SpaceDeferredLVHints+( q˙˙ +€€€€ ä€ LocaleName,) )q˙˙ €€LOCALENAME€€€-* q˙˙ +€€€€ ä€ LocaleName ." *q˙˙ /€€€ €# ä*€ţ LVChunkMax/, *q˙˙ €€LVCHUNKMAX€€€ 0' *q˙˙ /€€€ €# ä*€ţ LVChunkMax 1. +!q˙˙ 7€€€ €# ä*€ţPgnoFDPLastSetTime2/ .#q˙˙ €€PGNOFDPLASTSETTIME€€€ 30 +%q˙˙ 7€€€ €# ä*€ţPgnoFDPLastSetTime 41 'q˙˙N€€€ „'P1***€ý€€€Id@en-US52 )q˙˙ €€ID€€€63 +q˙˙N€€€ „'P1***€ý€€€Id@en-US7+ -q˙˙N€€€ „'P1***€ý€€€Id@en-US85 =/q˙˙ €€ID€€€L}9- 1q˙˙N€€€ „'P1***€ý€€€IdŤ˛źŕďď |ť M@en-US :4 3q˙˙P€€€ „'P***€ý€€€Name€@en-US;8 5q˙˙ €€NAME€€€<6 7q˙˙P€€€ „'P***€ý€€€Name€@en-US =:  9q˙˙S€€€ „' P ***€ý € € €RootObjects€@en-US>;  ;q˙˙ €€ROOTOBJECTS€€€?<  =q˙˙S€€€ „' P ***€ý € € €RootObjects€@en-US Gą š˝Ŕ?~  |ť OGĎşěĘŽ7Ž7  |Ű  !@T áB˙˙˙˙˙˙˙˙C7Aq˙˙ ,€€€€ dČ˙ MSysObjids DÎCq˙˙  ˙MSYSOBJIDS€€€E>@Eq˙˙ €€MSYSOBJIDS€€€F9Gq˙˙ ,€€€€ dČ˙ MSysObjidsGCIq˙˙ &€€€€€objidHEAKq˙˙ €€OBJID€€€IFMq˙˙ &€€€€€objidJGOq˙˙ +€€€€€ objidTableKHBQq˙˙ €€OBJIDTABLE€€€LISq˙˙ +€€€€€ objidTableMJUq˙˙ %€€€€€typeNKCWq˙˙ €€TYPE€€€OLYq˙˙ %€€€€€typePM[q˙˙ K€€€ „'d/***€ý€€€ primary@en-USQND]q˙˙ €€PRIMARY€€€RO_q˙˙ K€€€ „'d/***€ý€€€ primary@en-US GۢŒ0Ęm’q  |Ű  $SB$cq˙˙€ TS$gq˙˙€ UT$iq˙˙€  ( 0VU0kq˙˙€  4 <WV<oq˙˙€  @Gň &uÇFVš)  |Ű  H!X@H ŕZ˙˙˙˙˙˙˙˙H[PH uq˙˙ -€€€€ \ˆ˙ MSysLocales \DHwq˙˙  ˙MSYSLOCALES€€€]QHEyq˙˙ €€MSYSLOCALES€€€^RH {q˙˙ -€€€€ \ˆ˙ MSysLocales_WH}q˙˙€ `[H q˙˙ $€€€€€€ ˙€Keya]HFq˙˙ €€KEY€€€€b^H ƒq˙˙ $€€€€€€ ˙€Keyc`H …q˙˙ )€€€ €#*€ţTypedaHG‡q˙˙ €€TYPE€€€ebH ‰q˙˙ )€€€ €#*€ţTypefcH ‹q˙˙ 5€€€ ƒ#0*€ţ€€ iValuegdHFq˙˙ €€IVALUE€€€heH q˙˙ 5€€€ ƒ#0*€ţ€€ iValueifH ‘q˙˙ N€€€ „'\/@***€ý € € €KeyPrimary€@en-USjgHI“q˙˙ €€KEYPRIMARY€€€khH •q˙˙ N€€€ „'\/@***€ý € € €KeyPrimary€@en-USlZH™q˙˙7:.Sch ema\ Inte rnal \Maj or€ ü..Schema\Internal\MajormlH›q˙˙7:.Sch ema\ Inte rnal \Min or€ ü..Schema\Internal\MinornmHq˙˙7<.Sch ema\ Inte rnal \Upd ate€ ü0.Schema\Internal\UpdateonHŸq˙˙7:.Sch ema\ Exte rnal \Maj or€ ü..Schema\External\MajorpoHĄq˙˙7:.Sch ema\ Exte rnal \Min or€ ü..Schema\External\MinorqpHŁq˙˙7<.Sch ema\ Exte rnal \Upd ate€ ü0.Schema\External\Update LG]Żh…´ú$[  |Ű  \rq\Ľq˙˙78MSys Loca lesC onsi sten t€ ü,MSysLocalesConsistent `h!sXh ßu˙˙˙˙˙˙˙˙hvihŠq˙˙ .€€€€ Z˙ SmTblVersion w\hŤq˙˙  ˙SMTBLVERSION€€€xjhJ­q˙˙ €€SMTBLVERSION€€€ykhŻq˙˙ .€€€€ Z˙ SmTblVersionz_hąq˙˙€ {vhłq˙˙ ,€€€ €#*€ţVersion|xhKľq˙˙ €€VERSION€€€}yhˇq˙˙ ,€€€ €#*€ţVersion~{hšq˙˙ 1€€€€€€ €AnalyzeTimeStamp|hKťq˙˙ €€ANALYZETIMESTAMP€€€€€}h˝q˙˙ 1€€€€€€ €AnalyzeTimeStamp~hżq˙˙ 0€€€€ €ConfigTimeStamp‚hLÁq˙˙ €€CONFIGTIMESTAMP€€€ƒ€hĂq˙˙ 0€€€€ €ConfigTimeStamp„hĹq˙˙ 7€€€ €#*€ţLastUsedMergeTable…‚hMÇq˙˙ €€LASTUSEDMERGETABLE€€€†ƒhÉq˙˙ 7€€€ €#*€ţLastUsedMergeTable‡„hËq˙˙ 3€€€€ €ProfileDescriptionˆ…hNÍq˙˙ €€PROFILEDESCRIPTION€€€‰†hĎq˙˙ 3€€€€ €ProfileDescription lGV9O<˜g| |Ű tŠutÓq˙˙  š™™?ţ xG„ŐaŮŹŮy& |Ű €!‹s€ Ő ˙˙˙˙˙˙˙˙€  Ž‡€×q˙˙ .€ €€ €  P ˙ SmTblSection w€Ůq˙˙  ˙SMTBLSECTION€ €€ ˆ€PŰq˙˙ € €SMTBLSECTION€ €€ ‘‰€Ýq˙˙ .€ €€ €  P ˙ SmTblSection’z€ßq˙˙€   “Ž€áq˙˙ .€ €€ €# *€ţ SectionID”€Qăq˙˙ € €SECTIONID€ €€•‘€ĺq˙˙ .€ €€ €# *€ţ SectionID–“€çq˙˙ %€ €€€€ € ˙€Name—”€Qéq˙˙ € €NAME€ €€€˜•€ëq˙˙ %€ €€€€ € ˙€Name™–€íq˙˙ N€ €€ „'  P/***€ý € € €SectionKey€@en-US&š—€!›€ œg€  g€ ! ž€  Ą>Ąš€˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙STB¨E¨˙˙˙˙]Ô„ţ ńGGĄ!g TC¨{ €€MSYSOBJECTS§9uřIDTAB"Ń$2LEŸ8wTYPç wID_8żNAMż€wCOL¸O†ĐRPGNOFDPÇ8˙SPACEUSAGWwFLAGCwPPĐSORLOCASTA' wROOT) 8'TEMPLATEG ‚wRECORDOFFSETŻ8 'AD€$EFAULTVALUOƒw@KEYFLDID—„VARSEGMƒ"2AC—8…w@CONDITIONAL` UMNg†' ALCMAP9`1 w@ˆMOSˇ ^ UPLELIMI7 ‡VERSx‡8ˆwŹ0T‰Ď LBACKDATAŻ€w&EPENDENCIŔ‰'HE‡żSEPAR°LVŸ ˙úHINˇ—°ERREDL$lyVg(;×&VCHUNKMAXŸ8 ߏLASTXTIo ˙˙Xry '!SHADOW×p9ťpW!š8T!rçT!rÔ Z9ż~j8T!˙˙˙˙rč¸W!Â8Ô r: W!š8T!r€r8T!rW!˛8T!rW!0r8T!rW!Š8˙˙˙˙T!rW!x˛8T!rW!Ş8T!r˜W!Ş8T!rŔW!’8T!rW!Ԓ8T!rW!Ú8˙˙˙˙T!rW!eš8T!rˆV!‚8T!rW!˘8T!rW!b‚8T!r0U!z8T!r+ U!˙˙˙˙Ş8T!r&W!ę`T!rW!šT!rúďšT!r°W!'ę`;×VU!rW!ż˙o˙š8T!rŹW!Ú8 XZ9ÓXÖZ9ŰJj8[rq¸"é#§Ŕţűß8$1$ %š9›pÔ$w(ěšÄ%r#çcpPRIMoßűARY‡9#ac ˘9 u˘g8€ărćj8KrI÷z8¤Łüƒžpš÷"š9cISMTBL‡Ş9p‡‚8wAŘYZEů(Đ.~M+,Ę8l-rX!FIG?ťrUSEDMERGg(Ú8WPROF˙ë IL¸SCRIP9$ßP [ ŠZSp%Ş9ƒ'p(űŒ’8tržjŕ8˙"(+J+%+ <*+Ř­*(…*)\*%*#ô)¸)œ)Ő)$x) X˜;)#)ú(#×({( ë&"7&‚$$Ç&&Ľ%f%#˙$#Ÿ'-Â' '#|'!„%% ¨ Ë%+5(&@_$ş8xď„& §x&Ÿ‚ $"xđxY&(×$-O'%*'*5Xł(–`€Ŕ"" "W $œ"&z!;!#Ô #t#- —#ŕ"#Q#!Y!% !+ $&4  ‚8ç##ÄY" |xę!t ÷ %Ĺx."(Ź˙ -$#%˙"$ Ą˙˙˙˙˙˙˙˙€Sďq˙˙ € €SECTIONKEY€ €€ ĄC˘˜€ńq˙˙ N€ €€ „'  P/***€ý € € €SectionKey€@en-US& Ł€  ţ!Ľ˙˙˙˙˙˙˙˙€ @Ś™€óq˙˙ I€ €€ „'  !P***€ý€€€ SecID@en-US§Ą€Sőq˙˙  € €SECID€ €€ LˆB¨˘€÷q˙˙ I€ €€ „'ĚĂ°ńj•{ |Ű MF  !P***€ý€€€ SecID@en-USŠ’€ůq˙˙€    „G%X´H„ {r |Ű Œ ŞŁŒýq˙˙ %)syst em a cces s€ đ?ţsystem access!ŤĽŒ˙q˙˙! %żđsyst em a cces s Găne$úbw |Ű ˜ ŹŞ˜r˙˙ %/priv ileg e ri ghts€ @ţ privilege rights!­Ť˜r˙˙! %Ŕpriv ileg e ri ghts œGÝv6<Ł€€ |Ű ¤ ŽŹ¤r˙˙ %/grou p me mber ship€ @ţ group membership!Ż­¤r˙˙! %Ŕgrou p me mber ship ¨GÝe/?ˇÎ1p |Ű ° °Ž° r˙˙ %/acco unt prof iles€ @ţ account profiles!ąŻ° r˙˙! %Ŕacco unt prof iles ´GÝŽĺž!YŚz |Ű ź ˛°ź r˙˙ %)regi stry key s€ @ţregistry keys!łąźr˙˙! %Ŕregi stry key s ŔGăż÷ů=ńń |ů Č ´˛Čr˙˙ %)file sec urit y€ @ţfile security!ľłČr˙˙! %Ŕfile sec urit y ĚGăQ§G=1Îq |ů Ô ś´Ôr˙˙ %ds s ecur ity€ @ţds security!ˇľÔr˙˙! Ŕds s ecur ity ŘGůźo­›)Öy |ů ŕ ¸śŕr˙˙ #syst em l og€ @ţsystem log!šˇŕr˙˙! Ŕ syst em l og äGűőZńşÉ6} |ů ě ş¸ěr˙˙ 'secu rity log€ "@ţsecurity log!ťšěr˙˙! Ŕ"secu rity log đG÷ÎŇ°ń s |ů ř źşř!r˙˙ %-appl icat ion log€ $@ţapplication log!˝ťř #r˙˙! %Ŕ$appl icat ion log üGßZ䛧HH |ů  žź%r˙˙ %even t au dit€ &@ţevent audit!ż˝ 'r˙˙! Ŕ&even t au dit Gů&Ā÷$ Űr |ů  Ŕž )r˙˙ !user lis t€ (@ţuser list!Áż +r˙˙! Ŕ(user lis t Gýřƒ°H{ „s |ů  ÂŔ-r˙˙ %-kerb eros pol icy€ *@ţkerberos policy!ĂÁ /r˙˙! %Ŕ*kerb eros pol icy  GßڌüÔÔ |ů ( ÄÂ( 1r˙˙ 7=serv ice gene ral sett ing€ ,@ţ.service general setting!ĹĂ( 3r˙˙! 7Ŕ,serv ice gene ral sett ing ,GŤ΂˛X= Âv |ů 4 ĆÄ4 5r˙˙ %-regi stry val ues€ .@ţregistry values!ÇĹ47r˙˙! %Ŕ.regi stry val ues 8Gßžě.ńśś  |ů @!Č‹@ Á*Ę˙˙˙˙˙˙˙˙@ ËŚ@;r˙˙ *€ €€ €  *2˙SmTblScp ̏@=r˙˙  ˙SMTBLSCP€ €€ ͧ@U?r˙˙ € €SMTBLSCP€ €€ Ψ@Ar˙˙ *€ €€ €  *2˙SmTblScpĎŠ@ Cr˙˙€   ĐË@Er˙˙ .€ €€ €# *€ţ SectionIDŃÍ@VGr˙˙ € €SECTIONID€ €€ŇÎ@Ir˙˙ .€ €€ €# *€ţ SectionIDÓĐ@Kr˙˙ %€ €€€  €NameÔŃ@VMr˙˙  € €NAME€ €€ŐŇ@Or˙˙ %€ €€€  €NameÖÓ@Qr˙˙ &€ €€€  ˙˙˙€Value×Ô@XSr˙˙  € €VALUE€ €€ŘŐ@Ur˙˙ &€ €€€  ˙˙˙€ValueŮÖ@Wr˙˙ *€ €€ €# * €ţGpoIDÚ×@VYr˙˙  € €GPOID€ €€ŰŘ@[r˙˙ *€ €€ €# * €ţGpoID&*ÜĘ@* ţ˙+Ţ˙˙˙˙˙˙˙˙@ *@ßŮ@]r˙˙ R€ €€ „'  +2***€ý € € €SectionKey@en-USŕÚ@Z_r˙˙ € €SECTIONKEY€ €€ áŰ@ar˙˙ R€ €€ „'  +2***€ý € € €SectionKey@en-USâĎ@ cr˙˙€    DG Běěě! |ů L!ăČL ­>ĺ˙˙˙˙˙˙˙˙L ćßLir˙˙ *€ €€ €  >2˙SmTblSmp çĚLkr˙˙  ˙SMTBLSMP€ €€ čŕL[mr˙˙ € €SMTBLSMP€ €€ éáLor˙˙ *€ €€ €  >2˙SmTblSmpęâL qr˙˙€   ëćL sr˙˙ .€ €€ €# *€ţ SectionID! ěžL  ď>ďĄL˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙>ďčL˙˙˙˙˙˙˙˙Ą\\]B¨B¨˙˙˙˙€ €€€SPACEUSAGEď˙˙˙˙˙˙˙˙L\ur˙˙ € €SECTIONID€ €€ ďC đéL wr˙˙ .€ €€ €# *€ţ SectionIDńëL!yr˙˙ %€ €€€  €NameňďL{r˙˙ € €NAME€ €€óđL!}r˙˙ %€ €€€  €NameôńL"r˙˙ &€ €€€  ˙˙˙€ValueőňLr˙˙ € €VALUE€ €€öóL"ƒr˙˙ &€ €€€  ˙˙˙€Value&>÷ĺL> ţ˙?ů˙˙˙˙˙˙˙˙L>@úôL#…r˙˙ R€ €€ „' ?2***€ý € € €SectionKey@en-USűőL‡r˙˙  € €SECTIONKEY€ €€üöL#‰r˙˙ R€ €€ „' ?2***€ý € € €SectionKey@en-USýęL ‹r˙˙€   PG\Bcˆ†ů"]" |ů X!ţăX ™R˙˙˙˙˙˙˙˙XúX$‘r˙˙ +€€€€ R2˙ SmTblScp2 çX“r˙˙  ˙SMTBLSCP2€€€űX•r˙˙ €€SMTBLSCP2€€€üX$—r˙˙ +€€€€ R2˙ SmTblScp2ýX ™r˙˙€ X%›r˙˙ .€€€ €#*€ţ SectionIDXr˙˙ €€SECTIONID€€€X%Ÿr˙˙ .€€€ €#*€ţ SectionID X&Ąr˙˙ %€€€€ €Name XŁr˙˙  €€NAME€€€ X&Ľr˙˙ %€€€€ €Name  X'§r˙˙ &€€€€ ˙˙˙€Value  XŠr˙˙  €€VALUE€€€ X'Ťr˙˙ &€€€€ ˙˙˙€Value X&­r˙˙ *€€€ €#* €ţGpoID XŻr˙˙  €€GPOID€€€X&ąr˙˙ *€€€ €#* €ţGpoID&RXRţ˙S˙˙˙˙˙˙˙˙XR@X)łr˙˙ R€€€ „'S2***€ý € € €SectionKey@en-USX ľr˙˙ €€SECTIONKEY€€€X)ˇr˙˙ R€€€ „'S2***€ý € € €SectionKey@en-USXšr˙˙€  \G}ś‚˛ ‚t‚t# |ů d!ţd f˙˙˙˙˙˙˙˙d d*żr˙˙ *€€€€ fP ˙SmTblGpo dÁr˙˙  ˙SMTBLGPO€€€d Ăr˙˙ €€SMTBLGPO€€€d*Ĺr˙˙ *€€€€ fP ˙SmTblGpo dÇr˙˙€ !d+Ér˙˙ *€€€ €#*€ţGpoID"d Ër˙˙  €€GPOID€€€#d+Ír˙˙ *€€€ €#*€ţGpoID$!d,Ďr˙˙ %€€€€€€ ˙€Name%"d Ńr˙˙  €€NAME€€€€&#d,Ór˙˙ %€€€€€€ ˙€Name'$d-Őr˙˙ ,€€€€ ˙€ DisplayName(%d ×r˙˙ €€DISPLAYNAME€€€)&d-Ůr˙˙ ,€€€€ ˙€ DisplayName*'d.Űr˙˙ N€€€ „'fP/***€ý € € €SectionKey@en-US+(dÝr˙˙ €€SECTIONKEY€€€,)d.ßr˙˙ N€€€ „'fP/***€ý € € €SectionKey@en-US&f-df ţg/˙˙˙˙˙˙˙˙df@0*d/ár˙˙ K€€€ „'gP***€ý€€€ GpoName€@en-US1+dăr˙˙  €€GPONAME€€€2,d/ĺr˙˙ K€€€ „'gP***€ý€€€ GpoName€@en-US3 dçr˙˙€  hG? L žł ł $ |ů p!4p {p6˙˙˙˙˙˙˙˙p!7›p  :>:"p˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙>:0p˙˙˙˙˙˙˙˙"001¨¨˙˙˙˙ €€€€:˙˙˙˙˙˙˙˙p0ír˙˙ -€€€€ p2˙ SmTblTattoo :C  ;p ďr˙˙  ˙SMTBLTATTOO€€€<1pńr˙˙ €€SMTBLTATTOO€€€!=4p v>]p ˆ?$p ˆ!@?p  C>C'p˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙>C2p„˙˙˙˙˙˙˙˙'001((˙˙˙˙ €€€€C˙˙˙˙˙˙˙˙p0ór˙˙ -€€€€ p2˙ SmTblTattoo CC „D3pőr˙˙€ E:p÷r˙˙.€€€ €#*€ţ SectionIDF<půr˙˙ €€SECTIONID€€€„GCpűr˙˙.€€€ €#*€ţ SectionIDHEpýr˙˙%€€€€ €NameIFp˙r˙˙  €€NAME€€€„JGps˙˙%€€€€ €NameKHps˙˙&€€€€ ˙˙˙€ValueLIps˙˙  €€VALUE€€€„MJps˙˙&€€€€ ˙˙˙€Value&pN6ppţ˙qP˙˙˙˙˙˙˙˙pp@QKp s˙˙R€€€ „'q2***€ý € € €SectionKey@en-USRLp s˙˙ €€SECTIONKEY€€€„SMp s˙˙R€€€ „'q2***€ý € € €SectionKey@en-USTDps˙˙€  tGe|RśNŮŮ% |ů RC:\WINDOWS\Security\Database\secedit.sdbGzé–ĚÔćć& |ů %şíĐ |ť 2)ę  | RC:\WINDOWS\Security\Database\secedit.sdbG6 Žş' | Ř!UŠŘs˙˙ € š™™?ţ8­”YšÔÚ ÜG~qR[H??( | RC:\WINDOWS\Security\Database\secedit.sdbGzć–ŇuŠ|) |9 (şíĐ |ť 2)ę  | RC:\WINDOWS\Security\Database\secedit.sdbG6}5Xż@z* |9 0<>V÷<s˙˙> G đ?ţ@5@lsaanonymousnamelookup0?Wů<s˙˙?@żđlsaa nony mous name look up!>XV<s˙˙> ? đ?ţ@-@enableguestaccount0?YW<s˙˙?7żđenab legu esta ccou nt!>ZX<s˙˙> ? đ?ţ@-@enableadminaccount0?[Y<!s˙˙?7żđenab lead mina ccou nt!>\Z</s˙˙> A @ţ@/@restrictguestaccess1?][<1s˙˙?7Ŕ rest rict gues tacc ess!>^\<3s˙˙> A "@ţ@/@restrictguestaccess1?_]<5s˙˙?7Ŕ"rest rict gues tacc ess!>`^<7s˙˙> A $@ţ@/@restrictguestaccess1?a_<9s˙˙?7Ŕ$rest rict gues tacc ess!>b`<;s˙˙> É .@ţ@ą@machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon41?ca<=s˙˙?ÇŔ.mach ine\ soft ware \mic roso ft\w indo ws\c urre ntve rsio n\po lici es\s yste m\un dock with outl ogon!>db<?s˙˙> Ÿ .@ţ@‡@machine\system\currentcontrolset\control\lsa\disabledomaincreds40?ec<As˙˙?šŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \lsa \dis able doma incr eds!>fd<Cs˙˙> ­  .@ţ@•@machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous40?ge<Es˙˙?ŹŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \lsa \eve ryon einc lude sano nymo us !>hf< Gs˙˙> ą  .@ţ@™@machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled40?ig< Is˙˙?ŹŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \lsa \fip salg orit hmpo licy \ena bled !>jh< Ks˙˙>   .@ţ@w@machine\system\currentcontrolset\control\lsa\forceguest40?ki< Ms˙˙?ˆŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \lsa \for cegu est !>lj< Os˙˙> Ł  .@ţ@‹@machine\system\currentcontrolset\control\lsa\restrictanonymoussam41LŮW?mk< Qs˙˙?ŁŔ.mach ine\ syst ŮĄm_ o+ |9 M‚em\c urre ntco ntro lset \con trol \lsa \res tric tano nymo ussa m D&>nlD> ü˙@p˙˙˙˙˙˙˙˙D>€q:D$Ws˙˙ #€ €€€ @d€LVrRDYs˙˙ € €LV€ €€sCD$[s˙˙ #€ €€€ @d€LVtTD]s˙˙€   HGP mDi8Ř'y, |9 !@up<_s˙˙@V7System\CurrentControlSet\Control\Print\PrintersSystem\CurrentControlSet\Services\EventlogSoftware\Microsoft\OLAP ServerSoftware\Microsoft\Windows NT\CurrentVersion\PrintSoftware\Microsoft\Windows NT\CurrentVersion\WindowsSystem\CurrentControlSet\Control\ContentIndexSystem\CurrentControlSet\Control\Terminal ServerSystem\CurrentControlSet\Control\Terminal Server\UserConfigSystem\CurrentControlSet\Control\Terminal Server\DefaultUserConfigurationSoftware\Microsoft\Windows NT\CurrentVersion\PerflibSystem\CurrentControlSet\Services\SysmonLog@vu<as˙˙@V>wn< cs˙˙> Ç  .@ţ@ľ@machine\system\currentcontrolset\control\securepipeservers\winreg\allowedpaths\machine?xm< es˙˙?ĐŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \sec urep ipes erve rs\w inre g\al lowe dpat hs\m achi ne !&>yw<> ř˙ |>>|y<A˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙>  ¨¨˙˙˙˙žčY„{|“ űĽ¨xř`˙89đ?ţ@5@lsanoĄ!‚Šym8u˜n˜melxok˜p0ŕbg-@e˛¤E[Eb ege@tˆcąnh'đ' ad(iŠ' ' @$/@PUĂ5rŕŮrŕc8oYs1°27"7"7$7"7.5ą@mŤV-Şrh n\of w¸\Z cXoŢ\čydxw¨\řuyśŤŤŞI v8r¸iřnčp8lhcą)ythmhů Yc˜ÉtxŠ t×¨oŔ)4ŔatwŠ‡wGB7Ń9Ń‘eXŻ’\a\iJ#qŞ×U˙Y9á‰h !1$ '•'CeÜ y¸Ů cčuđÉ Ÿ—– —™—Cf˜p}˝ťZlRym¨Iąy8Ůď ˇ– ˇwˇEQ1ǧ– §‹§CŠI ™ w9ŢľżkmCg‘ GľGO;šťeđÁ‰ťŮ nXÉ \l9#ąpxá9ďŔĺ4˙ôÍŘ%Š/%•š$ˇă#ł0#Ľ‹"Ďź!G˙@Pu.ç E˘] M >|˙˙˙˙˙˙˙˙< gs˙˙> ÷ .@ţ@ż@machine\system\currentcontrolset\control\securepipeservers\winreg\allowedexactpaths\machine7System\CurrentControlSet\Control\ProductOptionsSystem\CurrentControlSet\Control\Server ApplicationsSoftware\Microsoft\Windows NT\CurrentVersion |C>A?}x< is˙˙?ŮŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \sec urep ipes erve rs\w inre g\al lowe dexa ctpa ths\ mach ine!&>~|<> đ˙ >>~<˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >A|<B˙˙˙˙˙˙˙˙>~> ¨¨˙˙˙˙A˙˙˙˙˙˙˙˙<ks˙˙> Ă .@ţ@Ť@machine\system\currentcontrolset\control\session manager\kernel\obcaseinsensitive41 "˝ť<'ĂX- |9 C >AB&>‚<> €˙:?‰}<CD>C@Ź DŠ‰<? >?‰<E˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙?BŹEŹ˙˙˙˙ ţr˘XDCŹx>AC@żđ8lsa nony m@u¨ˆaD‰me lˆok up˜7/eĐabQeÓ˘Jgđ et˜ ccŕˆnxáçĎadišçŕŔ @ŽŤî2r˜I r˜cAń™ ńZs`á"@ç˙á$@ç:+YÇŕ.@m h Ae\ s@f)wĐŮ \č Éo(oŤŞŤ" ů\wŤd‰wŔ\u˜ŞI vArĐinpAlxc˛HąŞJ\ y tamxu  ŠcYw@t ů tlAgŕnČšűťż˙goËHÉ˙ĄBÉ°sŔ`Ař Á\ ů@dxˆA9BÁ˘c€Xő}ˇrd@ Ź˙˙We­ yĐexÁđuŔĐA)Čy°@1Š Xf?Ÿ~WpÉa˜gůI¨h‡ń˜ ń‚ă d ˆY¨ '#ó‹ ŁoWáˆŃ1 @użíÜ˙úbm A- ĐGNŃôexp@ˆeˆd9 |")&\ˆđ™/w‰d¨řoäWahbm‰0"‰ń ŮŻ?–ex˜Xt@Y'šX çë‘:˙R֏%ße&Šć$ŽX$˛Ś#˛ô" T"͇!=J˙  Đ F =V“ ?˙˙˙˙˙˙˙˙<ms˙˙?ÇŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \ses sion man ager \ker nel\ obca sein sens itiv e C?E!BŽ<os˙˙> Ż .@ţ@—@machine\system\currentcontrolset\control\session manager\protectionmode41E<qs˙˙?BjŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \ses sion man ager \pro tect ionm ode!BŽ<ss˙˙> Ń .@ţ@š@machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess41E‘<us˙˙?|TŔ.mach ine\ syst em\c urre ntco ntro lset \ser vice s\la nman serv er\p aram eter s\re stri ctnu llse ssac cess!B’<ws˙˙> Ľ .@ţ@@machine\system\currentcontrolset\services\ldap\ldapclientintegrity41E“‘<ys˙˙?OTŔ.mach ine\ syst em\c urre ntco ntro lset \ser vice s\ld ap\l dapc lien tint egri ty!B”’<{s˙˙> ż .@ţ@§@machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal41E•“<}s˙˙?jTŔ.mach ine\ syst em\c urre ntco ntro lset \ser vice s\ne tlog on\p aram eter s\re quir esig nors eal!B–”<s˙˙> Á .@ţ@­@machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes7E—•<s˙˙?sTŔ.mach ine\ syst em\c urre ntco ntro lset \ser vice s\la nman serv er\p aram eter s\nu llse ssio npip es!L!ŮB˜–<ƒs˙˙> ë @ţ@‡@machine\system\currentcontrolset\services\sysmonlog\log queries1D:(A;CýUÓYÓY. |9 MHI;GA;;;NS)(A;CI;CCDCLCSWSDRC;;;LU)E™—<…s˙˙?šŔmach ine\ syst em\c urre ntco ntro lset \ser vice s\sy smon log\ log quer ies!Bš˜<‡s˙˙> Ą @ţ@@c:\perflogs1D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OI;0x1200af;;;LU)E›™<‰s˙˙?%Ŕc:\p erfl ogs!Bœš<‹s˙˙>  @ţ@{@c:\program files\common files\speechengines\microsoft\tts1D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)E›<s˙˙?‘Ŕc:\p rogr am f iles \com mon file s\sp eech engi nes\ micr osof t\tt s!&>ž‚<> ˙ Ą>>Ąž<˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >BĄœ<F˙˙˙˙˙˙˙˙>ž>  ¨¨˙˙˙˙BĄ˙˙˙˙˙˙˙˙< s˙˙> + @ţ@Q@c:\programdata\microsoft\windows\drm1D:P(D;CIOI;GA;;;BG)(D;CIOI;GA;;;LG)(A;;0x1e01ff;;;WD)(A;OICIIO;GA;;;WD)(A;;GA;;;SY)S:(ML;;0x1;;;LW) ĄC >BFE˘<‘s˙˙?[Ŕc:\p rogr amda ta\m icro soft \win dows \drm!FŁĄ<“s˙˙> 7 @ţ@]@c:\programdata\microsoft\windows\drm\cache1D:P(D;CIOI;GA;;;BG)(D;CIOI;GA;;;LG)(A;;0x1e01ff;;;WD)(A;OICIIO;GA;;;WD)(A;;GA;;;SY)S:(ML;;0x1;;;LW)E¤˘<•s˙˙?mŔc:\p rogr amda ta\m icro soft \win dows \drm \cac he!FĽŁ<—s˙˙> Ń @ţ@W@c:\windows\serviceprofiles\localservice1D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;LS)EŚ¤<™s˙˙?dŔc:\w indo ws\s ervi cepr ofil es\l ocal serv ice!F§Ľ<›s˙˙> Ő @ţ@[@c:\windows\serviceprofiles\networkservice1D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;NS)E¨Ś< s˙˙?mŔc:\w indo ws\s ervi cepr ofil es\n etwo rkse rvic e!FŠ§<Ÿs˙˙> ť @ţ@A@c:\windows\system32\wbem\mof1D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)Eި< Ąs˙˙?IŔc:\w indo ws\s yste m32\ wbem \mof!FŤŠ<Łs˙˙> [ @ţ@?@c:\windows\system32\appmgmt1D:ARLsEŹŞ< Ľs˙˙?IŔc:\w indo ws\s yste m32\ appm gŔB'˝X/ |9 M mt!F­Ť<§s˙˙>  @ţ@K@c:\windows\system32\windows media1D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GRGWGXSD;;;NS)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)EŽŹ< Šs˙˙?[Ŕc:\w indo ws\s yste m32\ wind ows medi a!FŻ­<Ťs˙˙> Ű @ţ@=@c:\windows\syswow64\export1D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)E°Ž< ­s˙˙?IŔc:\w indo ws\s yswo w64\ expo rt!&>ąĄ<> ţ ´>>´ą<˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >F´Ż<G˙˙˙˙˙˙˙˙>ą>  ¨¨˙˙˙˙ F´˙˙˙˙˙˙˙˙<Żs˙˙> …  @ţ@;@c:\windows\repair\default1D:P(A;;GA;;;BA)(A;;GA;;;SY) ´C >FGEľ°<ąs˙˙?IŔc:\w indo ws\r epai r\de faul t !Gś´<łs˙˙> ‹! @ţ@A@c:\windows\repair\ntuser.dat1D:P(A;;GA;;;BA)(A;;GA;;;SY)Eˇľ< ľs˙˙?IŔc:\w indo ws\r epai r\nt user .dat!!G¸ś<ˇs˙˙> }" @ţ@3@c:\windows\repair\sam1D:P(A;;GA;;;BA)(A;;GA;;;SY)Ešˇ< šs˙˙?@Ŕc:\w indo ws\r epai r\sa m"!Gş¸<ťs˙˙> ‡# @ţ@=@c:\windows\repair\security1D:P(A;;GA;;;BA)(A;;GA;;;SY)Eťš< ˝s˙˙?IŔc:\w indo ws\r epai r\se curi ty#!Gźş<żs˙˙> ‡$ @ţ@=@c:\windows\repair\software1D:P(A;;GA;;;BA)(A;;GA;;;SY)E˝ť< Ás˙˙?IŔc:\w indo ws\r epai r\so ftwa re$!Gžź<Ăs˙˙> ƒ% @ţ@9@c:\windows\repair\system1D:P(A;;GA;;;BA)(A;;GA;;;SY)Eż˝< Ĺs˙˙?@Ŕc:\w indo ws\r epai r\sy stem%!GŔž<Çs˙˙> -& ,@ţ@@browserD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)EÁż<És˙˙?Ŕ,brow ser&!GÂŔ<Ës˙˙> /' ,@ţ@@dmserverD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)LR1EĂÁ<Ís˙˙?^i[ę 4ňK0 |9 M!Ŕ,dmse rver'!GÄÂ<Ďs˙˙> -( ,@ţ@@ntmssvcD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)EĹĂ<Ńs˙˙?Ŕ,ntms svc(!&>Ć´<> ü É>>ÉĆ<˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >GÉÄ<H˙˙˙˙˙˙˙˙>Ć>  ¨¨˙˙˙˙) GÉ˙˙˙˙˙˙˙˙< Ós˙˙> 5) ,@ţ@@samssD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLO;;;IU)(A;;CCLCSWLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD) ÉC >GHEĘĹ<Ős˙˙?Ŕ,sams s)!HËÉ<×s˙˙> +* ,@ţ@@sysmonlogD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCRPLOCR;;;LU)S:AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)EĚĘ<Ůs˙˙?%Ŕ,sysm onlo g*!HÍË<Űs˙˙> + ,@ţ@@clipsrvD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)EÎĚ<Ýs˙˙?Ŕ,clip srv+!HĎÍ<ßs˙˙> , ,@ţ@@netddeD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)EĐÎ<ás˙˙?Ŕ,netd de,!HŃĎ<ăs˙˙> - ,@ţ@@netddedsdmD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)EŇĐ<ĺs˙˙?%Ŕ,netd deds dm-!HÓŃ<çs˙˙> y. @ţ@C@seassignprimarytokenprivilege*S-1-5-19*S-1-5-20EÔŇ<és˙˙?RŔseas sign prim aryt oken priv ileg e.!HŐÓ<ës˙˙> _/ @ţ@)@seauditprivilege*S-1-5-19*S-1-5-20EÖÔ<ís˙˙?.Ŕseau ditp rivi lege/!H×Ő<ďs˙˙> 0 @ţ@+@sebatchlogonright*S-1-5-32-544*S-1-5-32-551*S-1-5-32-559EŘÖ<ńs˙˙?7Ŕseba tchl ogon righ t0!&>ŮÉ<> ř ÜLn%>>ÜŮ<žđAkŘHŘH1 |9 MI˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >HÜ×<I˙˙˙˙˙˙˙˙>Ů>  ¨¨˙˙˙˙1)HÜ˙˙˙˙˙˙˙˙<ós˙˙> Ó1 @ţ@7@sechangenotifyprivilege*S-1-1-0*S-1-5-19*S-1-5-20*S-1-5-32-544*S-1-5-32-545*S-1-5-32-551 ÜC >HI&?ݍ<?>C&>ŢÜ<> đC߉<?JDŕŠ<?J#Dáŕ<? ä>?äÝ<˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙?>EäŘ<J˙˙˙˙˙˙˙˙?Ý?0BŹBŹ#Đ7ŠŔŔ.mach ine\ syst em\c urre ntco ntro lset \con trol \sec urep ipes erve rs\w inre g\al lowe dpat hs\m achi neżđenab legu esta ccou nt &ä ń1BŹŔ.hmach ine\ syst emxc ureWU n°coCrAlPe` Ao Ăl‰Ńôepp@sÉQU-rvP rh\wŃn˜ˆgxańl(w‰d¨ahbm ‹Š Pi1e7żđ@ePab e@d mX™ cŔ{7[ouÁtPŔçgQt˜ç@çaaQyɉˆŠm¸Öż›VokŠp˜+Ŕ @1‘ŕi@9™Ř ѐ is`áŔZżÂu"@ç˙á$@çŠ`fIwů°q H1s ů&d‰wjťŤúŔ ĎŽinpAlxcŇĄ ű`ůu o¨ w@tŕ Üţ­š t9o0i €f4˜) 8dXhqi"q:c¸ˆd@fîďť5F8Üemy eXĄhu ĐA9@y°@A‰ ofčřil|;Ô÷p˜ ¨ hČ'ˆŃa Łdş f"půf€ŕcđů Řq + fţ/Ü?=OŃ ‘ń@ŸúbmŕÁ" Ž+Čxš1ůŘűHQ ‰ůš^ÝîaĐ j]0P!Ŕ 8Ą0 gh¸\8Bél‰o c(¨; Bn†űŢ9) iX ůjBá'p09HQč"o  iąT|H’vżţßďh™ °\¸pq˛ *rŕPa‰ˆ đŠy @{ Ň n lpĐY @ 9áţßĂaáTOP"ľŘ&ahQčQŘQéĐY Đ9Št° Tjˇďçżţą HA%RC@Żq iPБ ¨!Iˆ‘c Tˆg × 8p@¨a,ß˙—aš0'@—7?2AhgY@é`+ C c Ş) Ń%ř@cţżž7:ˆ r`ŘŃU‘WúÉ!X m(fńů  yÁ&Ŕ‘q#á0yđe˙Îűďh’ÁgđpáŔk.Čk.Či.tđ™[ˇ ŕaĐhŤx Ťp1‘ ˙Ÿ{ęPŃ?Ňdm2mB@#Ŕh¸Šd—/6ˆ(9 ˛š"X  Đ@ů4ŕüëýQhs8qŁçO˙ŕŮwŠr@*i@™ŕq I— Ë(m32űżmݘĐbx˘ ‘fň w ą%pH`CmЃww˙Č(pšKY?Hńj ž÷îw6ŕAÁ7ššS Ń° ÓeJ /ée8šb¨ Q6ˆŃ0‘ âg˜Đ0rŚW­Ľ„)Ľ{vŚJߤez¤r¤3?¤E úŁ*ĐŁN‚4Ł<ř˘ąG˘+˘-"€^-+ ."ďX<Í-= "=Í!=!O+a˘*OS*s‘)j')FÔ,O…6,Fđ+OĄ€R+s´(aS(—ź'+‘' ń&=Č.4”.X˙˙<.FJ¸ Đ Đ äC ?EJEĺä<ős˙˙?@Ŕsech ange noti fypr ivil ege1!IćÜ<÷s˙˙> ›2 @ţ@7@secreateglobalprivilege*S-1-5-19*S-1-5-20*S-1-5-32-544*S-1-5-6Eçĺ<ůs˙˙?@Ŕsecr eate glob alpr ivil ege2!Ičć<űs˙˙> m3 @ţ@C@secreatesymboliclinkprivilege*S-1-5-32-544Eéç<ýs˙˙?RŔsecr eate symb olic link priv ileg e3!ygżGc¸2 |W Ięč<˙s˙˙> ™4 @ţ@5@seimpersonateprivilege*S-1-5-19*S-1-5-20*S-1-5-32-544*S-1-5-6Eëé< t˙˙?@Ŕseim pers onat epri vile ge4!Iěę<t˙˙> ‰5 @ţ@G@seincreasebasepriorityprivilege*S-1-5-32-544*S-1-5-90-0Eíë< t˙˙?RŔsein crea seba sepr iori typr ivil ege5!Iîě<t˙˙> ‹6 @ţ@9@seincreasequotaprivilege*S-1-5-19*S-1-5-20*S-1-5-32-544Eďí<  t˙˙?@Ŕsein crea sequ otap rivi lege6!Iđî< t˙˙> m7 @ţ@C@seincreaseworkingsetprivilege*S-1-5-32-545Eńď<  t˙˙?RŔsein crea sewo rkin gset priv ileg e7!Iňđ<t˙˙> a8 @ţ@7@semanagevolumeprivilege*S-1-5-32-544Eóń< t˙˙?@Ŕsema nage volu mepr ivil ege8!Iôň<t˙˙> ‰9 @ţ@C@seremoteinteractivelogonright*S-1-5-32-544*S-1-5-32-555Eőó<t˙˙?RŔsere mote inte ract ivel ogon righ t9!Iöô< t˙˙> ă: @ţ@9@sesystemprofileprivilege*S-1-5-32-544*S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420E÷ő<t˙˙?@Ŕsesy stem prof ilep rivi lege:!Iřö< t˙˙> ń; @ţ@3@sesystemtimeprivilege*S-1-5-19*S-1-5-32-544*S-1-5-80-3169285310-278349998-1452333686-3865143136-4212226833Eů÷<t˙˙?@Ŕsesy stem time priv ileg e;!Iúř< t˙˙> ‰< @ţ@/@setimezoneprivilege*S-1-5-19*S-1-5-32-544*S-1-5-32-545Eűů<!t˙˙?7Ŕseti mezo nepr ivil ege<!&>üŢ<> ŕ ˙>>˙ü<˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >I˙ú<K˙˙˙˙˙˙˙˙>ü>  ¨¨˙˙˙˙=1I˙˙˙˙˙˙˙˙˙< #t˙˙> q= @ţ@+@seundockprivilege*S-1-5-32-544*S-1-5-32-545 ˙C >IKEű<%t˙˙?7Ŕseun dock priv ileg e=!LbK˙<'t˙˙> K> @ţ@/@seservicelogonright*S-1-5-21-2874577178-1687215517-354648353-1001*S-1-5-21-2874577178-1687215517-354648353-1002*S-1-5-21-2874577178-16872‘ Šv3Ěc3 |w M15517-354648353-1003*S-1-5-21-2874577178-1687215517-354648353-500*S-1-5-80-0*S-1-5-80-3169285310-278349998-1452333686-3865143136-4212226833E<)t˙˙?7Ŕsese rvic elog onri ght>!"U<-t˙˙_l@@@USecurity applied to upgraded workstations  PG— mR)HŮŮ4 |w RC:\WINDOWS\Security\Database\secedit.sdbGzú–@ŇłL}5 |w 4şíĐ |ť 2)ę  | RC:\WINDOWS\Security\Database\secedit.sdbG6t˙‡x{6 |w  ¤"¤1t˙˙lv  @@iԛYšÔÚ ¨GvnRĘHl“z7 |— RC:\WINDOWS\Security\Database\secedit.sdbGz;qSß ~80 |] 30 |]GÉiXÁ4490 |] 4880 |]Gš’ŠŕŽŽ Qs:0 |] 1C:\WINDOWS\Security\Database\C:\WINDOWS\Security\Database\@,€~đ0 |]7şíĐ |ť 2)ę  | RC:\WINDOWS\Security\Database\secedit.sdbGö ş4;ŃZZ;0 |{ 0\K\Ż˙˙˙> Ą? @ţ@e@machine\software\realtek\audio\gui_information1G:BUD:(A;CIOI;KA;;;BU)Jä\ą˙˙˙?vŔmach ine\ soft ware \rea ltek \aud io\g ui_i nfor mati on? `G8éä÷RŠVp<0 |{ 0hKhł˙˙˙> {@ @ţ@?@machine\software\sonicfocus1G:BUD:(A;CIOI;KA;;;BU)Jhľ˙˙˙?IŔmach ine\ soft ware \son icfo cus@ lG‹őRrkk=0 |{ 0tK tˇ˙˙˙> A @ţ@E@machine\software\soundresearch1G:BUD:(A;CIOI;KA;;;BU)J tš˙˙˙?RŔmach ine\ soft ware \sou ndre sear chA xG| Ž4ő••>0 |{ 0€K  €ť˙˙˙> mB @ţ@1@machine\software\dts1G:BUD:(A;CIOI;KA;;;BU)J  €˝˙˙˙?7Ŕmach ine\ soft ware \dtsB „GŤ¸˘Ž33?0 |{ 0ŒK  Œż˙˙˙> }C @ţ@A@machine\software\knowles\apo1G:BUD:(A;CIOI;KA;;;BU)&?äŒ?>C&>˙Œ> ŔCߌ?LDáŒ?L#DŒ? >?Œ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙?>J ŒL˙˙˙˙˙˙˙˙??!/B,B,Đ@_Ŕ.Ŕ.mach ine\ syst em\c urre ntco ntro lset \con trol \sec urep ipes erve rs\w inre g\al lowe dpat hs\m achi neŔc:\w indo ws\r epai r\sy stem ГӒ`mE@Ü/B,Ŕ.hmach ine\ syst emxWUc ure n°coCrAlPe` Ao Ăl‰ŃôU-epp@sÉrvP rh\wŃn˜ˆgxańl(w‰d¨.źPQahbm ‹i1ešˆ@Ż2Ar vPcP8™yaŠžAmP`!‰D quP¨i0sx%ř@c:ˆ}żÚÜp1fQŃU‘WÉgpĐm(fńl0ů¨“fxá0yđeh-]UŻ’egđpáŔmhcÉoxoÉt°tđ[ˇ˙d¸ ŕaĐÓ6Ń˙hŤx Ťp9‘ €ÉŇdm mB@c¸Ŕh¸I—÷Lšw[Ż \đ    rxd a0Č tĐ wąhL.PQ!@w˙śť+{sPĄ"§i cr‰tˆ‘ #wĐ w˜ˆ $˙ t8Ó%Ńűűd/ h YЁ¸ÁYĐ@o ň#q8qă'řO #wŠrk˜ŁŰŕýˆ › q ˙  '(m32˜pŕg A w wbxpm°×ďéqŃ ˇ řw+Č)°%mřd¨Ŕń˙j w64˜ xđˆrČşö}ˁ7p @Iąą @g˜™˜i!R sŰ á"@çá$^_Ÿĺ@ç/ŕ,@bxĄ č&c@Y;™ +"dń9 “D @ţ@W@machine\software\realtek\realtekeffects1G:BUD:(A;CIOI;KA;;;BU)J˜Ĺ˙˙˙?dŔmach ine\ soft ware \rea ltek \rea ltek effe ctsD œGX-á7ĆÖ)xA0 |› 0¤K¤Ç˙˙˙> “E @ţ@W@machine\software\realtek\realtekoptions1G:BUD:(A;CIOI;KA;;;BU)J¤É˙˙˙?dŔmach ine\ soft ware \rea ltek \rea ltek opti onsE ¨GX™‹ĽąÄ Ä B0 |› 0°K° Ë˙˙˙> mF @ţ@1@machine\software\ips1G:BUD:(A;CIOI;KA;;;BU)J°Í˙˙˙?7Ŕmach ine\ soft ware \ipsF ´GŤ(ŻP|C0 |› 0ź&>ź> € >>ź˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙> >KźM˙˙˙˙˙˙˙˙>>  ((˙˙˙˙G=K˙˙˙˙˙˙˙˙ź Ď˙˙˙> ™G @ţ@]@machine\software\intel\intelsstaposettings1G:BUD:(A;CIOI;KA;;;BU) C >KMJ źŃ˙˙˙?mŔmach ine\ soft ware \int el\i ntel ssta pose ttin gsG ŔG |&`Fr sD0 |› 0ŘM!ŘŰ˙˙˙> {H @ţ@?@machine\software\fortemedia1G:BUD:(A;CIOI;KA;;;BU)J" ŘÝ˙˙˙?IŔmach ine\ soft ware \for teme diaH ÜG‹äuQЀ € E0 |› 0äM#!äß˙˙˙> ™I @ţ@]@machine\software\fortemedia\realtekeffects1G:BUD:(A;CIOI;KA;;;BU)J$"äá˙˙˙?mŔmach ine\ soft ware \for teme dia\ real teke ffec tsI čGIĚô/;aaF0 |› 0đM%#đă˙˙˙> —J @ţ@[@machine\software\fortemedia\voicetracking1G:BUD:(A;CIOI;KA;;;BU)J&$đĺ˙˙˙?mŔmach ine\ soft ware \for teme dia\ voic etra ckin gJ ôGK