MZ@ !L!This program cannot be run in DOS mode. $׼^͹^͹^͹W*@͹3Z͹3J͹3Z͹3W͹^͸5͹3[͹3F_͹3_͹Rich^͹PELSW \ ap@ S@ Ё@p!8.textZ\ `.dataxp`@.idatab@@.rsrc@r@@.relocpx@B0p@p@p@0"@́@@ 5 _@P^@c@P^ _ a0apccf0g`g [tickets] [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>] %s tgt [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>] purge [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>] sessions [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>] kcd_cache [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>] get <SPN> [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>] [-kdcoptions <options>] [-cacheoptions <options>] add_bind <DOMAIN> <DC> query_bind purge_bind ntdll.dll%#x/%d: %ws%#x/%d0 %ld/%ld/%ld %ld:%2.2ld:%2.2ld TimeSkew : %c %I64d:%02I64d NULL CS Kerberos DES-CBC-CRC Kerberos DES-CBC-MD5 RSADSI RC4-MD4 RSADSI RC4-PLAIN RSADSI RC4-LM Kerberos DES-Plain RSADSI RC4-HMAC(NT) RSADSI RC4 RSADSI RC4-HMAC(NT)(Export) RSADSI RC4(Export) RSADSI RC4-HMAC(Old) AES-128-CTS-HMAC-SHA1-96 AES-256-CTS-HMAC-SHA1-96 0123456789abcdef%4.4x %hs InteractiveNetworkBatchServiceProxyUnlockNetworkCleartextNewCredentialsRemoteInteractiveCachedInteractiveCachedRemoteInteractiveCachedUnlockreserved%hs forwardableforwardedproxiableproxymay_postdatepostdatedinvalidrenewableinitialpre_authenthw_authentok_as_delegatename_canonicalizereserved1%#x PRIMARY%ws DELEGATIONS4UASCENC-IN-SKEYX509FASTCOMPOUNDHUB-PRIMARYDISABLE-TGT-DELEGATIONNegative :%02x : %d %#x:%#x %wZ\%wZ %wZ:%ws %d %#x:%#x %wZ\%wZ %wZ:(%d) [%d] PDC_REQUIREDDS_6_REQUIREDDS_8_REQUIREDWRITABLE_REQUIREDNEXTCLOSEST_SITEFORCE_REDISCOVERYPDCGCLDAPDSKDCTIMESERVCLOSEST_SITEWRITABLEGTIMESERVNDNCPARTIAL_SECRETFULL_SECRETWSDS_8PINGDNS_DCDNS_DOMAINDNS_FORESTLOCALNO_TCPNEGATIVEError initializing localized output: 0x%08x -lh-li-kdcoptions-cacheoptionsticketstgtpurgesessionskcd_cachegetadd_bindquery_bindpurge_bind-hKerberosWinlogonsecur32.dllLsaGetLogonSessionDataLsaRegisterLogonProcessLsaLookupAuthenticationPackageLsaFreeReturnBufferLsaConnectUntrustedLsaDeregisterLogonProcessLsaCallAuthenticationPackage.%dError(%#x): failed to construct output code page. Error(%#x): start of conversion to multibyte string failed. Error(%#x): memory allocation (%ld bytes) failed. Error(%#x): string composition failed. Error loading resource: 0x%08x SW"4"4SW X"X0gRSDS>n^NI_dklist.pdbGCTL.rdata$brc.CRT$XCA.CRT$XCAA.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIY.CRT$XIZ,.cfguard`.rdata0".rdata$sxdata4" .rdata$zzzdbg@$hE.text$mni\.xdata$xp.dataph.bss.idata$5́.00cfgЁ|.idata$2L.idata$3`.idata$4,.idata$6.rsrc$01.rsrc$02UQESV3Vjjj^FF ā@=|u Fx,jEFPjj]@x9u9^tN-F ^[]̋U$SVW3jDEu0XPVEP@؅u zEPSVj@uT@~]ޅtSX@߅tSX@Pj@P@؅EPPS\@EE;ur3ɾMt P`@MU X0Et:tQj/8EYtURV3t3w yEMAM;Mrx E833Et,P`@#T@~EtPX@tQtSX@_^[]̋V~t>u~t jVjj@>t6@V7Y^̋VWh'j_W5`s@7h^'W5`s@6h@P@VW5hX@VW5h@VW5hH@VW5Hh@VW5hH@VW5h@VW5hH@VW5h@VWy5h@VWm5Hj|@̋Up@3ʼnEESV3f3fE%W=uh@d@؅u S'xvjhPjVjhh@tI3PVVh@hhx@tSl@M_^3[8]&yf=u(jhPjVSh h@u&wVVh@hhx@y̋Up@3ʼnEVQj^V5`s@5 } u}u1h'V5`s@4 t} u}uh@V3YYYEPEPp@EPEPt@EPEPEPEPEPEPh@V{3h'V5`s@{4,M3^7]̋UQE 3ҋMESVW;|;s ىUSRhF#PQ>[jhVQ؋)>RP39EWSE+PhH@j2h'j5`s@3(_^[]̅xtost`ttQ{tB|t3~t!tubh @h0@hX@hx@|hT@uh@nh(@gh@`tTHtGt;t/t#tQh'j5`s@!3h@!h@h@h@ h@h@j1YY̋Up@3ʼnESVW@U}艍|3vj^Ph@EjdPt@3tQ]ŠDD ŠDD ƒuD:D G;r|s(jY+D D D u3D t.E r~w ˆ\D.A;r؋|ƒdsJDEPh@j0x+u |ƉxM_^3[4]6̃ wO$,@@ø4@øD@øP@ø`@øl@ø|@ø@ø@ø@ø@ø8@3Ë,@,@,@,@,@,@,@,@,@,@,@,@̋VR@PVj5`s@0^̋U `s@E PujZ/YY]̋US]VWSRQh'j^V5`s@w0`@yhT@WVN/ @thl@WV1/ thx@WV/ th@WV. th@WV. th@WV. th@WV. th@WV. th@WVf. @th@WVI. th@WV,. th@WV. th@WV- th@WV- th @WV- tSh@V- h @V-YY_^[]̋SVWhF'j^V5`s@. 8@th(@WVU- thD@WV>- th\@WV'- thd@WV- thl@WV, th@WV, @th@WV, 㿄yh@WV, th@WV, th@WV{, tSh@Vb, h @VT,YY_^[̋ShF'j5`s@C- th@h8@j, tSh@j, h @j+YY[̋SVWPh'j[S5`s@,FPh 'S5`s@,FPh!'S5`s@,F Ph"'S5`s@,@FPh#'S5`s@},FPh$'S5`s@h, @$@v0v$h%'S5`s@?,N$cv(h'S5`s@ ,39~(vF,Ph @S* G;~(rh,@S*YYvD''v@vL('vHvT)'vPv\vXPv`h*'S5`s@+VdN`_^[̋UeSVu UMjPXEtFVFP‰EPj@P@؉]u MCAC1c WjY{} KPKfCfCPwQ6PˉKGfCfGPw Qh6OuPU ȉN$G~ fF"fBPrQ56E PHʋU PȉN,BfF*(fBPrQ5h+'j5`s@A*EPh,'j5`s@(*LSh-'j5`s@*Wh.'j5`s@)Vh/'j5`s@)]0_h0'j5`s@) C UEMPEPEPuS%yֹ'+Uy'uh1'j5`s@p) SX@^[]̋Up@3ʼnESVEMW3}EAΉEEPEPEPj EPQ%yֹ'MUy'uEph7'j5`s@(M9yߍAPAPWh8'j5`s@(MA PAPh9'j5`s@t(,h:'j5`s@_(M L @E0@4@tDE4't,t(E5't4t0E6't th@WV! th@WV th@WV th@WV th0@WV thH@WV @thP@WVs th\@WVV thh@WV9 @thx@WV yh@WV tSh@V h @VYY_^[̋SVWhF'j_W5`s@ 8@yh@SW @th@SW th@SWd ߅tVh@WK h @W=YY_^[̋USVEEPE3PEuPjEuPW؉]yӹQ'M~UyR']hS'j5`s@EphW'j5`s@M9q/WyGPVhX'j5`s@GPhY'j5`s@rG(PhZ'j5`s@\GPh$@h4@h['j5`s@E9MLuh @jYYG Ph$@h4@h\'j5`s@EMuh @jYY$Wh$@h4@h]'j5`s@uh @jYYh @j}YYMF0;q]_t-^[]̋UeEeVPEEPEPjEPwyֹT'@+UyU'-uhV'j5`s@ Mt^]̋U p@3ʼnEeVEMEAΉEEPEPEPj EPyֹ'3Uy'uh='j5`s@YM SMtM3^z]̋Up@3ĉ$E SVWD$ 33D$4@j8؉D$ PD$(FD$DD$LD$HD$@D$8D$XP\$8} 3t$ D$$D$D$(D$PD$Lx@`s@u)T@Ph@jnYPp@ T@YuH}YD$ h4@4l@YYu,~'jPD$th@D$,L$ D$ h<@4l@YYu~jPD$th@D$(뺋D$ hD@4l@YYu~jPD$td@D$D놋D$ h\@4l@YYu~jPD$td@D$@OD$ hx@4l@YD$Yu O3FA h@4l@YD$Yu OF3h@4l@YD$Yujh@4l@YD$Yujh@4l@YD$Yujh@4l@YYu~D$ jLL$@[D$ h@4l@YYu#~D$ jLL$HLL$D D$ h@4l@YD$Yu jOFYL$%h@4l@YY!jYOL$FD$ t tuD$D$$PjV|@P@u0T@=uD$$PV@P @u$D$(D$LPj8D$XPj t$4@tt$Xt$`h>'j5`s@sL$4T$ t 9T$Xu9L$\uD$D$uRQh?'j5`s@,D$Pt$,jj@a;uJD$Pt$,jj@y;`L$Hy"h@'j5`s@ 7/D$\$PD$D$PD$8PT$8g\$,D$|$0$O@t$4D$ t$t ́@׃;u r_M3^ ].; p@u4̋Uj@u@h @P@]̋U$0q@ ,q@(q@$q@5 q@=q@fHq@f Dh(ȀTl $<H܀v4Ԁ\֍,BZl…҅܅6Rrֆ"2DRl·އDj^̊ډƉފN4`* ܈ΈĈzldXND:."pNj2CreateWellKnownSidLsaNtStatusToWinErrorOpenThreadTokenOpenProcessTokenoGetTokenInformationXBuildTrusteeWithSidWSetEntriesInAclWJGetLengthSidCopySidIsValidSidlGetSidSubAuthorityCountjGetSidLengthRequiredIGetKernelObjectSecurity\GetSecurityDescriptorDaclInitializeSecurityDescriptorSetSecurityDescriptorDaclSetKernelObjectSecurityDuplicateTokenExEqualSidADVAPI32.dllLocalAllocYGetLastErrorLocalFreeK32EnumProcessesCloseHandleLoadLibraryWFormatMessageWFreeLibrarydFileTimeToLocalFileTimeeFileTimeToSystemTimepGetModuleHandleWGetCurrentThreadGetCurrentProcessOpenProcess!SetLastErrorGetProcAddressKERNEL32.dllexitY_snwprintf_s+sprintf_sfwprintf _wcsicmpwcstolwcstoulmalloc"_callnewhfreeo_XcptFilter__p__commode_amsg_exit__wgetmainargs__set_app_types_exit$_cexit__p__fmode__setusermatherr_inittermmsvcrt.dll5?terminate@@YAXXZ7_controlfpj_except_handler4_common%LsaEnumerateLogonSessionsDsGetDcNameWNetApiBufferFree-SleepUnhandledExceptionFilterSetUnhandledExceptionFilterMTerminateProcessGetModuleHandleAQueryPerformanceCounter GetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountHeapFreeGetConsoleOutputCP GetStdHandleYWriteFile:SetThreadUILanguageHeapAllocLoadStringWGetProcessHeapWideCharToMultiByteSspiCli.dlllogoncli.dllnetutils.dllapi-ms-win-core-synch-l1-2-0.dllapi-ms-win-core-errorhandling-l1-1-1.dllapi-ms-win-core-processthreads-l1-1-2.dllapi-ms-win-core-libraryloader-l1-2-0.dllapi-ms-win-core-profile-l1-1-0.dllapi-ms-win-core-sysinfo-l1-2-1.dllapi-ms-win-core-heap-l1-2-0.dllapi-ms-win-core-console-l1-1-0.dllapi-ms-win-core-processenvironment-l1-2-0.dllapi-ms-win-core-file-l1-2-1.dllapi-ms-win-core-localization-l1-2-1.dllapi-ms-win-core-string-l1-1-0.dll.NtSetInformationThreadNtCloseNtOpenThreadTokenRtlInitUnicodeStringExGRtlIpv4StringToAddressExWORtlIpv6StringToAddressExWRtlInitUnicodeStringRtlAdjustPrivilegeRtlInitStringNtQueryInformationToken;NtDuplicateTokenntdll.dll__iob_func_vsnwprintfm_wsetlocale memcpy memset 8Ph  xMUI4VS_VERSION_INFO 98 98?StringFileInfo040904B0LCompanyNameMicrosoft Corporation,FileDescriptionTool for managing the Kerberos ticket cachen'FileVersion10.0.14393.0 (rs1_release.160715-1616)4 InternalNameklist.exe.LegalCopyright Microsoft Corporation. All rights reserved.< OriginalFilenameklist.exej%ProductNameMicrosoft Windows Operating System> ProductVersion10.0.14393.0DVarFileInfo$Translation YM~m,V|6uyF^5/ny MUIMUIen-US00D0H0P0X0000 l44455/5K5Y5t55&656Y6p66666666 77&727>7J7V7b7t77777 8!8/8s888888 9$929U9g99:V:`:j:t:{:::::::::::;;J;V;.<<<<<<<<<<<<<<<<<<<<<<<<<===6=k=x======>/>L>i>>>>>>?+?9?a?p?z??????00070T0n0|0000001 181M1e1z1111111D22333334r4445M5n55555:6667/7D7`7e7777=888929G9c9h9999::(:N:::;!;l;;;c<<<<<<<4=Y=u=z====>>F?U????@J0y00011112242Q2n22222223363M3d3{333334"4?4\4y4444445(515N5k5556,6Z6p666666666677*7;7R77888C9H9R9X9g9p999999:::8:G:P:l:~:::::::::;;';Q;Z;;;;;;<<"<)>>>?? ? ?????!?,?r?????Ph0H0y000000_1f1p111112+252N2U2223$343334n4445<5^555555566r6}666666666 77%7<7C7b7r77777777$808<8S8Z8|88888889939?9H9_9f99999999::8:D:P:g:n:::+;c;;;;;;; <<*<0d>j>w>>>>>>>>>>>>>>>?!?&?,?1?6?;?@?F?N?[?u???????????`000&0:0B0J0P0V0c0i0s00000000021N1W1b1i11111111111111111112222+2;2A2L2R2^2n2w2222222222222222233 333/383J3V3b333333W44445-5A5G5 6$606?6H6Q6f6{6666666B7G7i77779999999: 1