MZ@ !L!This program cannot be run in DOS mode. $ ANcNcNcG|c#fOc#gAc#`KcNbc#bIc#cOc#jRc#Oc#aOcRichNcPELZ! jla @AwĒ= 8s.textij `.datan@.idatap@@.didatd@.rsrc=>@@.reloc  @Bh gRTpFH@(   |$&||,.\ "$& tv0\!4"X"% "l&#$$($@$X$$HJ8C50@P_0@P`Т ` 0p`P@p@ p@_ad gPgjjpkkkkkkl l0l@lPl`lpllllll mmmppAUTHZ.dllWINTRUST.dllext-ms-win-rtcore-ntuser-sysparams-l1-1-0ext-ms-win-security-capauthz-l1-1-0.dllext-ms-win-security-chambers-l1-1-0ext-ms-win-security-chambers-l1-1-0.dllM]iOxT "ZYG@I@F@WXE@222A8A43-0122-432F-86BB-FECA40971E35APPXNULLNULLExceptionReturnHrLogHrFailFast%hs(%d)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dllRtlDllShutdownInProgress%wswilinternal\sdk\inc\wil\resultmacros.hinternal\sdk\inc\wil\resource.h_p0WilError_01appid-EnableV2srpapi.dllappidapi.dllAppIDGetMsiVersionInfoDLLEXEMSISCRIPT\SystemRoot\System32\AppLocker\.AppLockerSrpIsAllowedSRP\\.\SrpDeviceLocal\SM0:%d:%d:%hslߙUEĥX PN3Oږ{uId+GYrIe4rqK2WT|PZXHWƚlZJ<&KwI︊a_ 4C_> lD^;FdlxX !APPID://FQBN-\%u.%u.%u.%02uAPPID://PATHAPPID://SHA256HASH\??\\??\UNC\\\;A271MXͱ\Registry\Machine\System\CurrentControlSet\Control\AppID\ConfigurationUsePublisherIdUseSystemIdentityOnlyAppxSignature.p7x%s\%sAPPX%2.2xAPPID://SHA256FLATHASHAPPID://SHA1HASHpQGU3ҹ-"1.3.6.1.5.5.7.3.31.3.6.1.5.5.7.3.81.3.6.1.4.1.311.10.3.13""2.5.4.102.5.4.72.5.4.82.5.4.6O=, L=, S=, C=kŪDO•EuOnRG9@7bDummyNameNeutral\Registry\Machine\System\CurrentControlSet\Control\Srp\GP\LastWriteTime\SystemRoot\System32\AppLocker\{........-....-....-....-............}.Policy\SystemRoot\System32\AppLocker\{%08x-%04hx-%04hx-%02x%02x-%02x%02x%02x%02x%02x%02x}.Policy\SystemRoot\System32\AppLocker\plugin.%I64i.PolicyPlugin.*.Policy\SystemRoot\System32\ApplockerPZXHWƚlV 3Ԑ%PROGRAMFILES%\Registry\Machine\Software\Microsoft\Windows\CurrentVersionProgramFilesDirProgramFilesDir (x86)%OSDRIVE%%WINDIR%%SYSTEM32%%WINDIR%\System32%WINDIR%\SysWOW64%REMOVABLE%%HOT%\\.\MountPointManager{3.ECSHA256Microsoft Primitive Provider1.3.14.3.2.262.16.840.1.101.3.4.2.1HashDigestLengthObjectLengthCATADMINɲq<"8?Bp_OriginalFileNameProductName\VarFileInfo\Translation\StringFileInfo\%04x%04x\EDP://EvaluationFlagsEDP://ExemptEnterpriseIdsEDP://EnterpriseIdsEDP://PolicyFlagsPEDP://IntentEnterpriseId\??\AppidEDPPluginExeAllowExeExemptAppxAllowAppxExemptEnlightenedEnlightenedAllowedPermissive\REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\EDPAppxDisallowedIsExemptedExeDisallowedIsExemptedDataContext\REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\EDP\EdpLiveEnforcementEnforcementLevelPZXHWƚl$RHDEH ?ApPF pt  H , H"" H@X.H^vLH|jHHHH H*jn H." x#8v#N#( T artxAPPID://FQBNAPPID://FQBNPXH8WEKYB3D8BBWE\MICROSOFT.COMMSPHONE\* artxAPPID://FQBNAPPID://FQBNPxh8WEKYB3D8BBWE\2A4E62D8-8809-4787-89F8-69D0F01654FB\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA5902\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA5903\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA5904\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA5909\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA5905\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA590A\* artxAPPID://FQBNAPPID://FQBNP`P*\5B04B775-356B-4AA0-AAF8-6491FFEA5906\* <artxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\* LartxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\*07db5aac-cbb4-41c6-a34e-6d1d495b1900D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"8WEKYB3D8BBWE\MICROSOFT.COMMSPHONE\*",0}))))Microsoft.CommsPhone, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1901D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"8WEKYB3D8BBWE\2A4E62D8-8809-4787-89F8-69D0F01654FB\*",0}))))2a4e62d8-8809-4787-89f8-69d0f01654fb, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1902D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5902\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5902, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1903D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5903\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5903, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1904D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5904\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5904, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1905D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5909\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5909, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1906D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5905\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5905, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1907D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA590A\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA590A, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1908D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5906\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5906, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USed59d942-4356-4ec7-8015-d1923476508bD:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\*",0}))))Microsoft.WindowsStore, from CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USf3eca261-b35c-4c40-b043-d671e122ee03D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\*",0}))))Microsoft.DesktopAppInstaller, from CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEApPF , HTfHJf,HtpHhdHfH!< f"H4$"h%Hv&`%'H(P'h)HF+)b$,H-l,Bz.H"0.`0H2F1b3H653h68z6R6(6H676`   8artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\NOTEPAD.EXE 8artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSPAINT.EXE DartxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\SNIPPINGTOOL.EXE <artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\STIKYNOT.EXE 8artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\JOURNAL.EXE 8artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WORDPAD.EXE <artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\XPSRCHVW.EXE artxAPPID://FQBNAPPID://FQBNP~CN=WINDOWS CENTRAL BUILD ACCOUNT\INTERNET EXPLORER\IEXPLORE.EXE <artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WMPLAYER.EXE 4artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSTSC.EXE artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\ADOBE FLASH PLAYER UTILITY\* 4artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\BASH.EXE 4artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\LXRUN.EXE <artxAPPID://FQBNAPPID://FQBNPO=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\PREVHOST.EXE @artxAPPID://PATH*a6e2b74a-89a2-43fc-bab7-da5be58846a0D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\NOTEPAD.EXE",0}))))NOTEPAD.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a1D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSPAINT.EXE",0}))))MSPAINT.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a2D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\SNIPPINGTOOL.EXE",0}))))SNIPPINGTOOL.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a3D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\STIKYNOT.EXE",0}))))STIKYNOT.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a4D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\JOURNAL.EXE",0}))))JOURNAL.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a5D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WORDPAD.EXE",0}))))WORDPAD.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a6D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\XPSRCHVW.EXE",0}))))XPSRCHVW.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a7D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=WINDOWS CENTRAL BUILD ACCOUNT\INTERNET EXPLORER\IEXPLORE.EXE",0}))))IEXPLORE.EXE, in INTERNET EXPLORER, from CN=WINDOWS CENTRAL BUILD ACCOUNTa6e2b74a-89a2-43fc-bab7-da5be58846a8D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WMPLAYER.EXE",0}))))WMPLAYER.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a9D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSTSC.EXE",0}))))MSTSC.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846aaD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\ADOBE FLASH PLAYER UTILITY\*",0}))))All files in ADOBE FLASH PLAYER UTILITY, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846abD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\BASH.EXE",0}))))BASH.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846acD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\LXRUN.EXE",0}))))LXRUN.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846adD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\PREVHOST.EXE",0}))))PREVHOST.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEfd686d83-a829-4351-8ff4-27c7de5755d2D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "*"))Allow AllApPF p  H N Ln H"f lHVHd&bH4>H|z|H\Zz8(HN6 P artxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\FILEMANAGER\* @artxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE\* XartxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER\* 4artxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\WINDOWS.CONTACTSUPPORT\* XartxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.ASSIGNEDACCESSLOCKAPP\* LartxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.PARENTALCONTROLS\* ,artxAPPID://FQBNAPPID://FQBNPCN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MOCAMERA\* tartxAPPID://FQBNAPPID://FQBNP *\*\*07db5aac-cbb4-41c6-a34e-6d1d495b1901D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\FILEMANAGER\*",0}))))FileManager, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1902D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE\*",0}))))Microsoft.MicrosoftEdge, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1903D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER\*",0}))))Microsoft.Windows.ContentDeliveryManager, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1904D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\WINDOWS.CONTACTSUPPORT\*",0}))))Windows.ContactSupport, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1905D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.ASSIGNEDACCESSLOCKAPP\*",0}))))Microsoft.Windows.AssignedAccessLockApp, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1907D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.PARENTALCONTROLS\*",0}))))Microsoft.Windows.ParentalControls, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1900D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MOCAMERA\*",0}))))Microsoft.MoCamera, from Microsoft CorporationApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEfd686d83-a829-4351-8ff4-27c7de5755d2D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))(Default Rule) All signed packaged apps =F,"t핐c?" 4U M29qvA t A t M3^]̋U MEVP3juuPĐuT~4)MUYy E t}t up^]̋Vjx$WK43Wt;t P_^̋V*x 3Vt=K4t P^̋UjjEPQRj+u ux ] ̋UEVtjZtHPu\jRQjPjEPVhj+u ux0^]̋UEtjYtPPu\jQRjPj hjhj+u ux0]̋UQES3Vu EWttjWXHÊ#utWSpWSElUFt Nt^~VF3_^[]̋UQQV5W,FePjjEMPjQVhN h6u_^]̋UV3tvWx83t*S]W++ٍt tAu_[u Izt^]̋UVf8tutQu+Q+Ѝ AZW^]̋UE 3Ʌt=vWxMQuQMi tE3f]̋UW3t+E SV+tft fNu^[uz3f_] ̋USVWuru 3VWx;wu z3fw_^[] ̋UE Vu+t=wMQuQ t3f9u t΍Qffu+4N^]̋U 3ʼnESً‰VuW=p3f t 8 dtPSV3f9 Dž+t3t"tu.Dž"DžDžt DžhQ3hfPhvQh~vHvD^_^[]̋Vtu 6Y&f^̋USVu مu CFWPXYu2,'}tVuGVPp;s_^[]3 <@8@3 4@0@3 ,@(@̋UE$3@]̋U 3ʼnES]3VuW} tPVju2kt +#7tOhPQtˍQAu+ʍx\t H;wUP5M_^3[躶]̀= Vuj@Vjh`  ^̡؄uhPh؄̋UQ3ʼnEV5ԄuhP5Ԅt M3^]̋UVWTuhju֋PPu<_^]̋UE V3t=vWx6S]MWQux3WPSx;wu z_[ tM^]̅u3@ÍQAu+ʍA̅ujXÍQffu+M̋UQS]VWjYEK@K4K K<|K0rK(hK^KTKJKD@3ɋExPt :u9pTsVj3ɋWtH} #G Ps ;0OQs0OQs0OQs0O(Qs(|0ODQsDl0Ou?t5@$hPD$P֋5DtD$PjY)$l_^[3艮] ̋UQQuuuuu u]̋USVWuQQhP ΁QQQju׋jjh_^[]̋USVWuQQu~ QQVju׋jjuZ_^[]̋Uu jujjh]̋UQQuQQuzY]̋UQQu Y]̋UhjuWjjh]jY)̋UQuptY]QM#̋Uut]QM)^̃9t1̋U3ʼnEVu% EWusQuQh9v3@QQQPVc#yVQM3M_3^]̋UQQSVW3ۋSVuMhSt=t ]u=EPjVuESjVu T=*tnuE]PjVu w9]tKSjVu8T=*u+SVu 9tE3VQMM_^[]ho>E3QQQ8xhPWh}u!TtZMh*I؅ySQMQtV'̋Q9t1Y̋UE S]V3WFCFF EfC fFFFECHF CLF$F(K EzKSKDI~,t9~0s2Wj|PEtv,j|PxEF,~0N,t0v0us%u֋sD%u֋s #%_^[]̋SVWGwk4;t%,6j|Px&v4fF;uwj|Px3!GG_^[̋USVWj4_~ Ã~u=t9hj|PFtjYfN3fNf8;uNt\}t)Fk4;t^ 9Yv;Gt64A;uFN@F3fVAAFQk4WN_^[]̋UQSVW=̄3ۋte9_uU]_x 9_uEGtt2Ȑj ^3ҋt9Nt vut 9^uON_^[]̋UQS]2VW}u VSVt~:u3@@,u ,}8˥u yAu+ϋ+Ã~2\CJyAu++y;rWrVSpD_^[]̋U3ʼnESVW3ۋ]E5t,Ȑ3E u4 9NvuEtK9tGuȋWMty(ExQ0֋M ؋E]@Eu׋5`tuu֋M_^3[ǥ]E|̋UuU MȐ9Ȅt:3A ĄA}"Ȅt uȄ Ą] ̋UVjXjfEXjfEXjfEXhjjhhE$fEED`t6 tSAtJPqqj Y4Mg#y3=u QQU#^]̋V395t55  tRQ\55^1 x 3@ ̋VWt7t#N1N1t P6t O_^m1_^jjhhԅX ̋U} SuH3xxru[} uU38t0V5W;t(F F tv vd^^ 6u=_^3@[] ̋U I3SVWEEEEP71]EP}utjhjjjhSdu%T T@T/EP =Dt MtGt/t tWp_^[]̋Ux3ʼnEESVE3ɉU܃ME3MWMMfẺMfMfEMfMfEMfMMMMfEMfM]9Fu hDvTYYjXjfEčUXfEƍEPEEPEE@E{}NtAUyRtuEPvEPF EȋF$NEPEPUGSuuEPuEPEuG9^tv뙍UuEvPvEPFEȋF uȉE܍ME3PF<Mt EEEME3PM<xlMt EEẺMЍEPu܍UVM/]ԋxf{0u79Ct2hDsTYYu=KD$u 9{uC C$u9{u t9{t9{(t39{ t{ u9{trT$(L$htjC$h $<s$<Ph$<5sD$PP$8PD$XPL$LtPy6=@L$LQVppjY0L$`D$D$89y u2u.=t@tL$LQQppHL$`D$9|$(9y h $Lh$L<h$L!hD$tP$HPD$|PL$p^Oy0=@L$pQVppj$39H t+@t%QQhx55Td3K#|$,t(D$$PD$PD$8PO|$tT$`|$(=T$`z /R$ T$$Py6=@VppjYjT$ YD$ tA APqqjY$L$Xy+=b@UVppjZh$jP菣L$l3҃ L$49Q 3$3|$<DŽ$ D$dD$@D$ D$HD$<A$QRL$DQRRPR$Pt$68Ћϋ3EE$jEUXuuuEu=3~9FEjhdWjXf9G G@ff;ffGH2 ؅WJQr S資G PP‰PPRhCj2P f CAff;u+fщE3fMEM]MEM@;F(Pj u uTyD3ظt#BtPrr,jYt^ tS tH M_^3[{] ̋Ul3ʼnEESVuWE Qu 3u؉ff<qP\u9]uE9]uEh3WP茅 Džf‰ ffAΉ`y33UjX fff(BU8@j fffHBX`3fffEEE3^fAfE0PuuuЉu$,4FhE38t׋؉]EGErփ=udG t^33>PhTjAX+PEP G;rҋ=]tG tEPww%=Extmu!VNP =x0t1Gt+Pwwj Yf= tMyWJ}DU NPPPPPPv@E=t.t&G@t Pwwj Y=t2G@t PwwjYt=tuG@t0PQPRwwjY=t7G@t1PQPRwwjYuMyt ؅x4jZM39MA39Fh!IuM_^3[h]̋U SVW3ɉMf9u QWWF@9FU~f9EkREE%E"E\E*E?f;Etf;Etf;Et9]u f;Etf;EuAuыuEH=v4MfffFvȉNuN>~]j%E0E7ZCf;t+j"^f;t#j\^f;t}uj*^f;t j?^f;tfBfqC$< sfEfEf€ sj0j7Zfj%fAZmw3f_^[]̋USVWMf3f3!U!7!wEf9EAMj%ME%^f90uBuQ^k;s +fCfGv3JЉWuV3ۋEˋ@Hf;Eu+E;3fE@ HBxfCf;]r3fyOt 'g_^[]̋SVW3Ɉ "w0r 9ww,0 Ar Fww,7arfww,WFr _^[̋UE V3t=v x5S]3WxEPuWS`x;wu _[ tM^]̋UQQVWE3P u};tj^duDu PVVVP(tVP$tߋHU<t}uuVuu}tMtk_^]̋USVWu  v DEb3QQQP(؅Lehj YjZ3U}UujYjEРXEč}Eԍ}333AuVQVuuܫEĉEEuM̉uȉM}E(KEEUE}I9ut MLC(9p vD@9p v:@@t.8օt&p3 : ubAuM3EEEu؉EEulhPhhjHuN MN _^[]B;r̋U3ʼnES]VWj4jP򉍸Dž h3Dž4pDž 3DžAxpPhXjDžptHu u3 E3WPPV,u TWWP0tPWEP4%h WPug Dž WPS8j4WPBg Dž43DžHj Y󫍅DžH(P3E܉T`djXH3@XPhXj\HPWEP4؅TtWS<t W@M_^3[=[]̋UH3ʼnEVEkŪEDEEO•t1j4EjPe E4EEuPEPjHM3^Z]̋U SV3M‰uWEދSWu VPQ ؅w}tq9uu w uBj^sff;uftfPf;QufuދtE8E@EsEMj jo^Tt_^[] ̋U,SVW3EEEىEEEEPhQjZt gEPhQjZt AEPhQjZt EPh$QjZrt }}u}u }3E؋Ѕu]Kff;Eu+h,u3UEt:uȍQff;Eu+ʃh4uEUtAu ȍAEff;Eu+Mh@uUEt=uȍQff;Eu+ʃ!hLoucUu"wU v3Ht9UBU7EPE3PMy{bj^aZ]tbWWEPQjZu27EPE3PM)x]ttt 3}tMEtEtEtt_^[]̋USVW3MEQWj}PډuMuT ;wytnEPWjuu TG!339v?GE3ɉE:uu AtEEBE;rj^_^[]̋UE V3t=v x7S]3WxEPuWSx;wu 3f{_[ tM3f^]̋US3Vtv x=ʋWtf9tut+ _xQu+Q C^[]̋U3tv x QuQJ t3f]̋UjQRj+u ux]̋U<3ʼnESVWjUjMEQM3QPy3=@Vppj Y9]M u7(uMWy3=@@6Vppj Y腕?ApPFGG;GU;G =xOk;h;`ω]9_ Q;U؋Up9UgyZQ Q;QU؋UE9U<y /QQ;QU؋U9UyE܃@E;G nOωM܀9f9A|yr9Yi9Y `Q T9W/x;A!|;A;AB;;G< D E;G хt7+H;r~H;OwvJMȉM;ȋMrcE;Gw[UC;]rɋẺ88=t@tuppj Yh tMM_^3[Q]á=t@tSppj뵡=t@tppjY뙡=t@tppjס=m@cppj볡=I@?ppj 돾;̋U43ʼnESVW3UjE܋jEPEPSy3=@WppjY&q9uXM LuVy3=@WppjY赑>ApLF.~$kF $^;U;kFF;F;FF;F;39N v,FËX;XrP;wLXX;XrA;^w7_^[]̋USVWU3҉ERMUQRPUڋ0EzMv3VEP3Pu0EN3Qff;u+ Mw؋NQff;u+ MwXtxttNQff;Eu+MPvScWN Qff;Eu+MPvW9WE M E8FF A3؋EE_^[]̋UQQEUMSVWj^t8PtXڅu\Mt1Q\jWSjPVRjQuuj+u ux8_^[]̋U4S3EMVWEEE@M؉EEEigj jEPEPhEPCuEPjG rɅxE_^[]̋USVW3EPuuP9]t EP؍GwUE-y[4u%d03j VpБЉWt=tv@tmVuppj YMTMGЉEy>w uQQ%d0j jpБE8t jY3}t ut EP_^[]̋Up3MfE3fESVW}UīMMfMMMMMMfMMMЫf3fEE}E EEPP9ut EPEЍMi؅lUM؅WMUU؉]?}9wsGW׉EȋG U؉Eԅl3ɋ]̋;uuAukJeMȃz v^3E}]ċ;}]u6E@Eu#p3ҋ;u BuE}AuLJE܃@E;B rEM$mUh]kEv3( qU؉AEM붋Eu )ujPR EhPPu]}uEPEtPMlt ֋9EP}t EP_^[] ew}uEEFPFPF PF PF PF PF PFPFPFP6EhPuG؃81j3}YEMEEE؅ }MUAu E؃`xHEإ}ԋuG}ԉu;}4M3EuE 0%̋SVWمtst u_^[̋U0ASVE𡴄W}EljUMEt} u} t}]t- ;tLAtGuRqqj Y( ;tAtRqqj Y Ǻ0%;==tV=t-= ;Aqqjo;rAeqqjM;t^AtUqqjY :;t"AtqqjY } EtEk]3UZfC fEfEftCljEԅt-;t)At EкPqqjY UfCfEfEftCljE܅t$;t AtEغPqqjYwfCfEfEft EE}CuMEuuPEPEP&;Aqqj;Aqqj=@=P=`tg=ptI=t+;AWqqjYބ|;txAtoqqjZ;taAtXqqjC;tJAtAqqj,;t3At*qqj;tAtqqjYu3uuWWW} uUuug_^[]̋U3ʼnEVhjP!Mu uhhPL xPV%?M3^A]̋UDSVWjT[jfEXfEEh!@EȍEjPEM3ɉ]PhEMPMME0EME@MЉMtu 3ۉ]u3ɍEQhjj SWPQQQu}GvY3QfLGGQPh Eڅuul8Eux|r;]| ;EvE]]t uMu(Ӂtˁtׁu 3}t u_^[]̋U3ʼnESډMV3{vdWjX}hEPQuTt x){t#SEPuuTt _M^3[?]̋UQQSVW33uډEt E3tw^tQEMQPWjjVu'TzuETt 3#uEu뉾x;3t_^[]̋UQQSVW33uډEt bE3tw\5tOEWMQPjVu'TzuETt 3#uEu닾x;3t_^[]̋U4VjYjZjXjfEXj"fMfMYj$fEXj0jhfUEt E fUE fMfEEܴ fMfEE H h $h($Ph0!EPj UMxwE֋Ej XfxIj ֍Mx9jU؍Mx(=tjUЍMxx ^]̋U VWh =t33uyt =tgEPEPeEPEPUxkEPjUMx>LJ(rx h _^]ËM4u*̃=SV5$$;t-W6GtONGtO@9;u_3($Ɖ5(r 5t; t 5^[̋UeSVWjEWPt d0jjpБu ]t9UVEy tO9Mtt ]g}=t@tWuL!ppj YeM^F AFtaFGFtg$$9HtjY)Np5$E_^[]̋U83ʼnEESډEVWfC}ȉufEڃEsE܅5SEP U؋y M]tD;t@fGfEڃE܅WEP MԍUVxEȃxЋ 3}}jYM EAEth EP}th!EP3|tzufDf+ffEfEڃ:hE܅*LQtPC +PCPDEPiCMԍU؃ wGu=$nGtGE̋GEOUŰ t$ff+EfG fEfEڃv&eM;Otxi?$u]E܅tO QwPBM̃ +PCPG EPBMԍU؃ yMM닾M_^3[7]̋U4SVW33Euus GH:ulHf;rXfEfEvΉMȉMu APEwPA 1j\Zf9uf;uGCiEGEj!EEE؍EjPEЉuPhEE@PuuxM3VVVSG3}t uuEEE؍EPjEuPE@uuE;Gu 3ufEEPEPu#uJEM=wQtEfEw2TȉMEPEPu9M3dE3ɉECM}t uMt ;Ot_^[]̋QV5$3W$ x6;u_^Y̋U SVW3G5$ÉE$;V OtfFf+F fGfEfEw~BȉMtpFPvQg?N G+PGPFEPI?GtOEOGEG3@EE6$Y:_^[]̋U$ESV3UW} މMuptwt2jjEPEPQMtEMtEEt XE-؅{j uESPuEt3;v !Mt]E PUtU v3UMjRPuhME;EsEthfMjZfffAv3 OMjZAvj\_f8C3PAPc=} V3!GJUEJt EUEfBv3ٿUBJjQPuhUEJ;suTf;sf{\t "MEt eMwy@EtqMQuPjuuM뼅xPU 9 f+ ffOɃv3 UȉOtPrQ < eԾEtƾyC]Kt 謾ctOt 蘾g]t t肾#_^[]̋UP3ʼnEESVWjE3hSEE܉EGtLO Gv3ȉOGP5 Q;E !0׋y3Ej EEĉEȍEjPEE@PhE]Py4=,@"VSpL!pj Y蜮]EjP3ɍEQQh -PQQQu  y3}u }eE܃ejPj EPh-EPjjju xM(sj(YMw_蝼؅tTuESj Ph-EP3PPPu x$CtHtt HtuE ]}t uyOt 7gM_^3[x.]̋U$SVW3UWhjWjWh !dEuT蜻EffQvHQ8 ωEt}EMRE;uPSuEh0mPWWWu MEt]APSEj\YM`tbCf9H`Cf9HE?f;Mtf;MuoMf9Hufj\Yf9Hu]fxVuVfx ouOfx luHfxuuAfxmu:fxeu3fx{u,j-Yf9H&u#f9H0uf9H:uf9HDufx^}u 3{f0fSw6{uPuWU7 M&Mup_^[]̋VWf;s3)эJ;~FP\tfujVW̑_^̋Ut 6D&Nt &f^̋U3ʼnEESVE܋E 3WEEPVh"UuT؅)ہjY3}EEPSEPtjP_WpSP2E EE쉅tE艵xuЋSPppPEDž|"E]֋MPw ttuЍEWPpPօuT؅tBہ7Gt+ w&u9rPwu1G #誴M_^3[&]̋U3EEEEEPE E@Pu U$]̋UQQSVWEE0P3h]ut޳EPVWjuu(tt GjY;rx=wqumW f9\BuZu tf9\BuHfGf+M fGfAwJM W ؉YuAPRSd0 $(}t u_^[]̋UQQVWEE0P3huVxk}t˲wS觲tFEPWVjuu(t…x~u~u E N $u}t u_^]̋UQQeEVPhExjEPjjhu,}t u^]̋U3ʼnESVu ډuEW}}t%VWuuuu uӋ؃uEU VWuuu3xktf9tV:3f9uN^3F7PVVE3P蕿؅x#}tN+EEF3Gr!3|Ot3FGrM_^3[:#]hDhql(]E EuE3҉PV{X3EPPPPhjh"0\;y(A0A4A8A<PPp";mШ[APPh"hP?O3ff;u+É3 ?3f 4=PPuPҋJxctWv3Au]CffAPq+ 3 3ۋ@!j^E3@Ëe苵E%̋UQVWjZ3;|If;rAS;w9EPSOIx$MG ;wA;vƍ 83[_^]̋U3SVWjYf9F, f;Шj\YjXf9t:؅fj\}Yf;t fuƉEЋ+CPEPM+MfEfEEjPEP4t؋EjXj\YYE 3Nj[NQff;u+VM ftf9~uf;r 0 NEjY_^[]̋SVWff'FDXPYtF3ɁfLXfuԍ?f3f#3f;sYFHPYt fGff;rft2fff;tN+PPQd if_^[̋UQ3EtwEP-ЋE Mt x!‹]̋USV3ۋWtf9tuu Et x+8_^[]̋UQVWEP֋xFUjX W+t,S]~+مt< ft f9Ju[u3f_^]̋UWUMtE E !3ɉMSVtEPM3A;3EutEPd0jpБ؉]umujS&3{@ f3fCECE C CE Mt(]ыSoMȃMuu]E^[ _] ̋U VujY3MEEu QUMFx MMN^]̋USV3ډuEuuuuuu iWQU39xTMEPEPUx UEMPuuux3Mtzy tk_^[]̋USV3EWu 0ލEuPjZu]xE3PEVVVE] Mtx3S(׋JI9MuEPsR{ȉMx>Eu F;s$rċu t}tuJJ&'MM_^[] ̋U0SVq 2WډME&E3ҋ;u BuEE3҈t%EUPAE숁p }\RRREE@JPEqP6x} s26jVj jx"3PPPEPEP6x } r;t?e}EE&PEԥuvPyȅ}}QLEtBe}EE&PEԥuE&vPyyȅx7}|uuE3u BPȅx}| E_^[] ̋UQ S3EVE$ˋ;u Auh0%hd%EPEPEPU'x}^[]̋U S3ۉU]M VuW]]]]^]E@!;ujXUEM^UMSu VF]UEP3M3Ey &;uuBu$EPq謉qUt%MuEu UP GMUemMttu "ȈMt &fXtFFt Ft=2tVF3ɋUAFEP}t.MFFtjhSuM3u u}x}tNE8|FE eEE8v8ujVSt E 0E@E;rًu}E8u FuMpt ft 3tҗ_^[] ̋USVWjXjfEUXfEEE$E%FPEP>x^d0jPjpБFtD~ f.hWYYt#VNW QF<_3f;ufEPW yEPWUx 39EF_^[]̋USVW3ۋӹDG ;uJG BuG Hut)Et"PQ3tEtPQ3Aus iW ˋ4;W IAu;E]]SE]PGpz E OEVPqt ڕEPj VS\x8E9X(v)@,h4u EC;X(r EEPXtSSSSSEPEPGpPxWEt>Eh4u EF;r EEtE4C;]ruE3_^[]̋U,S3ۉU3]؉]]]VW}ܫtt{QEhju]ܥESPjEPE]ॉ]]؅x.j3ɍEQjPQQQEPju؅x }u𥥥M _^[]̋Vt%~tvjf>t 6&^̋U3ʼnES] 3EEW}uEE@EEEthVPPEPEPhjEPW0x}s2E$ttu3hjW^ M_3[]̋U5u 5L5uhH]hXYu@à 3̋U3ʼnE} SVW`H؅`3d}p;t/h3 u=܅tjY`3FuEtiE];r:9;t3Ή;֋ 9UuE9Mt΋‰UEىMPu؅Y===܅33} d3؅p;t-h3 u9=܅j_tj:3Fh4h,܅[YYuh(hY=܅Yu3=t&hYtu5Wu`3@M_^3[?] ̋U} u]*̋Ucsm9Eu u P#YY]3]j0hq0E3uE w} u=`uu9E t =tNE} u duu u׉EMEQPDYYËe3uu}Euu uEMEQPYYËe3uu}Euu uO^EMEQPYYËe3uu} }EVVu^MEQPxYYËe3uEVVuHMEQPIYYËe3u=t4EVVuMEQP YYËe3uE t Euu uEMEQPYYËe3uu=tG=dt>Euu u׉EMEQPtYYËe3uuE E } w ̋UQ3ʼnEVu3;u sWu>t ׃;u r_M3^ ]; u@%\̋UjXu\h P]̋U$h d`\5X=Tff tfPfLf%Hf-DxElEpE|pth lxjXkǀ|jX |jX |jXk LjX Lh]̋Uh d`\5X=Tff tfPfLf%Hf-DxEpE|pth lxjXkǀ|h]̋UVEtVY^]%PjhxreEuu5YTjAYeEE܍EPEPu4 u؋M M܉ E ËujY̋UuUYH]%%̋UE3SVWH<AYt} p ;r H;r B(;r3_^[]̋UjhrhjdPSVW1E3PEdeEhtTE-PhPt:@$ЃEMd Y_^[]ËE3Ɂ8ËeE3Md Y_^[]̋UEMZf9t3]ËH<39PEu f9Q]̋UeeVWN@;t t УjEP E3EE̐1EȐ1E3EM3EEPԐE3EM3;t5uO@ щ _^]%hjd5D$l$l$+SVW1E3ʼnEPeuEEEEdËM3b̋Uuuu uhdh]%%%hjd5D$l$l$+SVW1E3PeuEEEEdËMd Y__^[]Q%̸QRPhsZY̸̸̸ ̸̸DQRPh(seZY̸(̸$̸H̸,̸0̸4̸8u̸<e̸@U̸̸̸UQ u0u2'EEPh IxE3ɄA ]̸PQRPhHs%ZY%8UQ u0u2'EEPhxE3ɄA ]̸\QRPhhsZY̸X%|̋Md Y__^[]Q̋M3Pd5D$ +d$ SVW(3PuEEdPd5D$ +d$ SVW(3PEuEEd%xWVS3D$ }GT$ڃD$T$D$ }GT$ڃD$T$ uL$D$3؋D$A؋L$T$D$ ud$ȋD$r;T$wr;D$vN3ҋOu؃[^_̋D$L$ ȋL$ u D$S؋D$d$؋D$[QL$+#ȋ%;r Y$-%t%̍KT$B 3J3q̍MiT$B J3LqZ̍nGT$B 3J3xq̍MGT$B J3]J3Sq̋ cm̋UQSEԅVu;t&W>Wj|Pxu>;u_^[]"؜(.rXX̤$ d4rjHTB*ޙΙҚ 6X>Л ^J*rܗ—*4@xtJVd̗̘˜rΡܡ(6JTnԢ &BbrУXF0  ֠ƠjP6hΥ$6Nd؟hj~Lth T(plޝP0@R0txdܕ$HܞԐԔF̕Rt,ȑ̔Ht8ܐ@"BH>؜(.rXX̤$ d4rjHTB*ޙΙҚ 6X>Л ^J*rܗ—*4@xtJVd̗̘˜rΡܡ(6JTnԢ &BbrУXF0  ֠ƠjP6hΥ$6Nd؟h memcpy_s_vsnwprintffree??1exception@@UAE@XZ??3@YAXPAX@Zmalloc_vsnprintf_s ??0exception@@QAE@XZ ??0exception@@QAE@ABV0@@Z _wcsicmp_vsnprintf memmove!_wcstoi64g_errnoiswspaceo_XcptFilter_amsg_exit_inittermmsvcrt.dll??1type_info@@UAE@XZ`_lock_unlock__dllonexit _onexitj_except_handler4_common GetCurrentProcess1OpenProcessTokenGetCurrentThreadIdGetLastErrorCloseHandleFormatMessageWGetModuleHandleExWGetModuleFileNameALoadLibraryExWGetProcAddressOutputDebugStringW&ReleaseSemaphore#ReleaseMutex7WaitForSingleObjectExHeapFreeGetProcessHeapHeapAlloc6WaitForSingleObject!OpenSemaphoreWDisableThreadLibraryCallsCreateFileW FreeLibrary GetSystemMetrics GetCurrentProcessIdDeviceIoControl CreateSemaphoreExW CreateMutexExWQueryPerformanceCounter$PackageIdFromFullNameGetPackagePathKCertGetNameStringWGCertGetEnhancedKeyUsage"PackageFamilyNameFromId%PackageNameAndPublisherIdFromFamilyNameIsWow64ProcessWow64DisableWow64FsRedirectionWow64RevertWow64FsRedirection1GetFinalPathNameByHandleW'BCryptOpenAlgorithmProviderBCryptCloseAlgorithmProvider!BCryptGetPropertyBCryptCreateHash#BCryptHashDataBCryptFinishHash BCryptDestroyHashCryptSIPRetrieveSubjectGuidForCatalogFileCryptSIPLoad-SleepUnhandledExceptionFilterSetUnhandledExceptionFilterMTerminateProcessGetSystemTimeAsFileTimeGetTickCountapi-ms-win-core-processthreads-l1-1-2.dllapi-ms-win-core-errorhandling-l1-1-1.dllapi-ms-win-core-handle-l1-1-0.dllapi-ms-win-core-localization-l1-2-1.dllapi-ms-win-core-libraryloader-l1-2-0.dllapi-ms-win-core-debug-l1-1-1.dllapi-ms-win-core-synch-l1-2-0.dllapi-ms-win-core-heap-l1-2-0.dllapi-ms-win-core-file-l1-2-1.dllapi-ms-win-ntuser-sysparams-l1-1-0.dllapi-ms-win-core-io-l1-1-1.dllapi-ms-win-core-profile-l1-1-0.dllapi-ms-win-appmodel-runtime-l1-1-1.dllCRYPT32.dllapi-ms-win-core-wow64-l1-1-0.dllbcrypt.dllapi-ms-win-core-sysinfo-l1-2-1.dll:RtlSetThreadSubProcessTagRtlInitUnicodeStringRtlNtStatusToDosErrorREtwTraceMessageFEtwGetTraceLoggerHandleEEtwGetTraceEnableLevelDEtwGetTraceEnableFlagsMEtwRegisterTraceGuidsWTEtwUnregisterTraceGuids9EtwEventRegister;EtwEventUnregister RtlRunOnceExecuteOnce<EtwEventWrite(RtlSetLastWin32ErrorRtlNtStatusToDosErrorNoTeb;NtDuplicateTokenNtAccessCheckNtQueryLicenseValue7EtwEventEnabledwRtlLengthSidRtlEqualUnicodeStringRtlGUIDFromStringRtlPrefixUnicodeStringRtlAllocateHeapRtlFreeHeapNtReadFilenNtWaitForSingleObjectRtlUpcaseUnicodeStringNtQueryInformationFileNtOpenFile+NtDelayExecutionNtClose$RtlCreateUnicodeStringRtlFreeUnicodeStringNtQueryDirectoryFile,RtlInitializeSRWLockRtlAcquireSRWLockExclusiveRtlReleaseSRWLockExclusive RtlCopyUnicodeStringNtOpenSymbolicLinkObjectNtQuerySymbolicLinkObjectNtQueryVolumeInformationFileNtQueryObject6NtDeviceIoControlFileNtOpenKeyNtQueryValueKeyGNtSetValueKeyLdrResSearchResourceRtlCompareUnicodeStringntdll.dll!PackageFamilyNameFromFullNameGetStagedPackageOriginIsDeveloperModeEnabledKERNELBASE.dllApiSetQueryApiSetPresenceapi-ms-win-core-apiquery-l1-1-0.dll}wcsnlenwcsstrRtlCompareMemoryLocalFreeResolveDelayLoadedAPIDelayLoadFailureHookapi-ms-win-core-rtlsupport-l1-2-0.dllapi-ms-win-core-heap-l2-1-0.dllapi-ms-win-core-delayload-l1-1-1.dllNtQuerySecurityAttributesTokenNtOpenProcessToken.NtSetInformationThread:NtDuplicateObjectNtOpenThreadTokenUNtGetCachedSigningLevelNtSetCachedSigningLevelRtlEqualSidNtCreateSectiondNtUnmapViewOfSection|NtMapViewOfSectionLdrResReleased_CxxThrowExceptiony__CxxFrameHandler3 memcpy memsetpkkkkklll ll@lPl`lplllk0l mmm(@Xp   8 WEVT_TEMPLATEMUI4VS_VERSION_INFO 98 98?StringFileInfo040904B0LCompanyNameMicrosoft CorporationB FileDescriptionSRP APIs Dllt*FileVersion10.0.14393.2248 (rs1_release.180427-1804)6 InternalNamesrpapi.dll.LegalCopyright Microsoft Corporation. All rights reserved.> OriginalFilenamesrpapi.dllj%ProductNameMicrosoft Windows Operating SystemDProductVersion10.0.14393.2248DVarFileInfo$Translation CRIM8h<NJ"4sL'*иy@?{]`h M]iOxT " WEVT CHANhLMicrosoft-Windows-AppID/OperationalTTBLdTEMPGLOqTnbtAD҂FilePathAndStatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0(' FilePathLength 'FilePath Status $$FilePathLength$FilePathBufferStatusTEMP0??RAMZ"FilePathPublisherNameAndStatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0(' FilePathLength 'FilePath 2MxPublisherNameLength &Ǭ PublisherName Status 4$FilePathLength$FilePathBuffer,PublisherNameLength,PublisherNameBufferStatusTEMP8XEOX١UT:_A| StatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0Status lStatusOPCOLEVLdPPwin:Error(win:InformationalTASKKEYWEVNT`(HH8HHWEVT  T `  OPCODl ,AppIdTriggerOpcodeLEVL@P, (win:InformationalTASKKEYWH| ,AppIdTriggerKeywordEVNTDl  l WEVT-T ( /40011CHAN  P  TMicrosoft-Windows-AppLocker/EXE and DLL\Microsoft-Windows-AppLocker/MSI and ScriptlMicrosoft-Windows-AppLocker/Packaged app-ExecutionlMicrosoft-Windows-AppLocker/Packaged app-DeploymentTTBL"TEMPf0mXu[1!AORuleAndFileDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0,CPolicyNameLength  PolicyName wRuleId (RuleNameLength gRuleName (-RuleSddlLength uGRuleSddl  TargetUser *TargetProcessId (' FilePathLength 'FilePath (pHFileHashLength jFileHash  = FqbnLength Fqbn & TargetLogonId  H\, Pt  (PolicyNameLength(PolicyNameBufferRuleId$RuleNameLength$RuleNameBuffer$RuleSddlLength$RuleSddlBufferTargetUser$TargetProcessId$FilePathLength$FilePathBuffer$FileHashLengthFileHashFqbnLengthFqbn TargetLogonIdTEMP `^^tClpARuleAndFileDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0,CPolicyNameLength  PolicyName wRuleId (RuleNameLength gRuleName (-RuleSddlLength uGRuleSddl  TargetUser *TargetProcessId & U PackageLength XPackage  = FqbnLength Fqbn (Pd4 Tt (PolicyNameLength(PolicyNameBufferRuleId$RuleNameLength$RuleNameBuffer$RuleSddlLength$RuleSddlBufferTargetUser$TargetProcessId PackageLength PackageBufferFqbnLengthFqbnTEMP8R!Rw(+TA| StatusDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0Status StatusTEMP .j*,["UA+V FilePathDataxmlnsDhttp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0(' FilePathLength 'FilePath Hl$FilePathLength$FilePathBufferTEMPl0όFW4pƞD EventDataAGoData/KNameFilePathLength A;oData#KNameFilePath A;oData#KNameSha1Hash A?oData'KName Sha256Hash A7oDataKNameResult A1oDataKNameUSN    8T h$FilePathLengthFilePathSha1HashSha256HashResult USNTEMPh$n E1P kP܃D EventDataAIoData1KNameImageNameLength A=oData%KName ImageName AQoData9KNameParentProcessLength AEoData-KName ParentProcess A?oData'KName StatusCode A7oDataKNameBucket A1oDataKNameUSN  AGoData/KNameNtfsFileIdSize A?oData'KName NtfsFileId AMoData5KNameOriginDataPresent A=oData%KName SessionId A7oDataKNameOrigin A3oDataKNameType A?oData'KName Generation AAoData)KName SmartScreen A?oData'KName DataLength A3oDataKNameData %%%$&D&`& t&&& &&''$'@'\'x'$ImageNameLengthImageName,ParentProcessLength ParentProcessStatusCodeBucket USN$NtfsFileIdSizeNtfsFileId(OriginDataPresentSessionIdOriginTypeGenerationSmartScreenDataLengthDataTEMPX,FrnQ(N<.D EventDataAGoData/KNameFileNameLength A;oData#KNameFileName ASoData;KNameCurrentProcessLength AGoData/KNameCurrentProcess AQoData9KNameParentProcessLength AEoData-KName ParentProcess A1oDataKNameUSN  AGoData/KNameNtfsFileIdSize A?oData'KName NtfsFileId AMoData5KNameOriginDataPresent A=oData%KName SessionId A7oDataKNameOrigin A3oDataKNameType A?oData'KName Generation AAoData)KName SmartScreen A?oData'KName DataLength A3oDataKNameData -.,.\... ... /@/X/l/|////$FileNameLengthFileName0CurrentProcessLength$CurrentProcess,ParentProcessLength ParentProcess USN$NtfsFileIdSizeNtfsFileId(OriginDataPresentSessionIdOriginTypeGenerationSmartScreenDataLengthDataOPCOT2020win:Startwin:StopLEVLPd0R|0P0win:Errorwin:Warning(win:InformationalTASK <1h111,SrpPolicyConversion(SrpPolicyRuleSort0SrpPolicyHitCountJoin SrpPolicyLoadKEYWEVNT @@@0` AAX0` BB4 X0` CC4 L0` DD4 @0` E@E4 X0p F@F4 L0p G@G4 @0p HHL0` I@HL0p J/X00K/X00L/@00M/X00N/X00O/X01P/X01Q/X0 1R/X0 1S/@0 1T TX0 U UL0 V V@0 WWX0 XXL0 YY@0 ZZ@0 [ Z@0 \@\L0p ]@]@0p ^^tX0` __'X0` QtX!L@ERe848* WEVT_TEMPLATEMUIMUI en-USl000000 0(00080@0H0P0X0`0h0p0x000000000000000001(1@1X1p111111222 2$2020001111 111A1R1V1\1`1f1j111122%2|222283?333M4P55556I6X666666 77J7S7a7h7v777788>8G89N:q::::::::;1;B;\;x;;;;;;Y>e>p>>>>>>>>>>>?{?m1y111V22222A334Z4f4r444444444455#515E5l555626:6K666T777 8J8|88 9=9U9_9}9999 :6:T:i:{:x;;;; <<-<4a>}>>>??U?[?h?s?????????00&0:0H0l0t0z0000000000<1A1G1L1f1p1v1|1111111111111J2i2v22222q3z3333 4;4H4~44556 66 6|666667&71787?7J7Q7X7c7j7q7|777777`8i888%9I9\9p9u999::9:T:_:r::::::: ;^;c;;;;;;<<<<>? ????040T0Y0z000000"1S1112212Z333333333334P44!6[6j6t6|6 7*7X77`8 9&9,9S9]9g9q9999P:::B;;-g>x>~>>>>>D?K?t60=0000F1122i3o33344:4}4444444435@57.777?8889!9x99:;;c>j>$??0b00000001112 222 2S2[2h2n2u22222>3E3L3333A4p4x4455555K6Y6666666.7^879J9Z9r994:N:t:}:::::;w;;;;;;;;5<;<===_>j>>>l0X444455]5t555j6666677778<8o89'9`9v99990:n::;W;{;;;7<{<<=Z==\>i>>>>G?80Q0x0000001x2223353c3h3333333333"4I4T4Y4r4444555 66%626766666697778 9!9A9999::G:]:b:v::::u;|;;H<<<=$=C=S==>>>>>> ??&?9?>?P?a? 00(090D0M00001=2222S3p333444444 5/595555c6m6}66777(777D7J7O7U7^7c7h7n7u777777777/858;8M8V8_8h8r8x888888889.939l9r9z99999999J:O:`:::::#;w;;;;;{<<==q>>>>J?????000 1p1122Z364Q4f4o4z445 55*5^55 6Q6666V7788"9X9|9999\::::);.;?;;;;;6>??@\90b000000L11O2[22 3l3556678>G>P>>>>>??P50T0e00000?1n1}11123 3+3x333 44R4o4z44444A566667(7A7i7774898N8U8_8$9::m:; ;-;I;b;;;;5<{<<<<<=4=I=R=y==>+>s>>>>>>>>h>>??ph0)0l0000000 1@1T1t11111111222$2(20242<2@2H2L2T2X2`2d2l2p222222222233(0 00,0D0\0t0000000000 24000 00000$0(0,0004080<0@0D0H0P0X0\0