DonatShell
Server IP : 180.180.241.3  /  Your IP : 216.73.216.252
Web Server : Microsoft-IIS/7.5
System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586
User : IUSR ( 0)
PHP Version : 5.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Windows/SysWOW64/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /Windows/SysWOW64/authz.dll
MZ@	!L!This program cannot be run in DOS mode.

$IK
*U
*U
*URyU
*U
*U*URU*UR~U*URoU(*URxU*UR}U*URich
*UPEL[J!	hm@(k0w8@p<f@.textgh `.datal@.rsrct@@.reloc
x@Bo[J@[JK[Jt[Jt[J[J[Jmsvcrt.dllAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllAPI-MS-Win-Core-ProcessThreads-L1-1-0.dllAPI-MS-Win-Security-Base-L1-1-0.dllKERNEL32.dllntdll.dll'>oo^ooo#o.oλouoooQooowwJwcw?ww;wwww&w)www@_w@twwPw#
w'ws
M%

s

i
wwvw5+wB1w<wPww1wDw^w}wwwnwwvww[ww|wfwwO*w5
w$w<w=wDww7wwVwPQw5w*w:wMww#wwwjwFwH5wIwwJwRwfvwwBwwOw1w wUwzwvwwTwUwww~kw@kww[{w8~w:w$whmd5D$l$l$+SVWm1E3PeuEEEEdËMd
Y__^[]QÐUE3+WHU]US3VW9EW}U3@_^[]U}LV]j,hPm1M3BU3u
m;0W;tu5(m;(9utYEuuugEu9ut9MEuQu"Eu}S9u}EEmm,m<mPm]mqmmmmԝmm
mm.m^mrmmEuuuiEu(m;32y[J..PYA
%5_~Yk;xB`RcmvQ*ٶz)-WR:rqUvu5hq&7Md-Kk*Kd0F[z2Qe|	

 !"#$%&(')*+,-AUTHZ.dllAuthzAccessCheckAuthzAddSidsToContextAuthzCachedAccessCheckAuthzEnumerateSecurityEventSourcesAuthzEvaluateSaclAuthzFreeAuditEventAuthzFreeContextAuthzFreeHandleAuthzFreeResourceManagerAuthzGetInformationFromContextAuthzInitializeContextFromAuthzContextAuthzInitializeContextFromSidAuthzInitializeContextFromTokenAuthzInitializeObjectAccessAuditEventAuthzInitializeObjectAccessAuditEvent2AuthzInitializeResourceManagerAuthzInstallSecurityEventSourceAuthzModifySecurityAttributesAuthzOpenObjectAuditAuthzRegisterSecurityEventSourceAuthzReportSecurityEventAuthzReportSecurityEventFromParamsAuthzUninstallSecurityEventSourceAuthzUnregisterSecurityEventSourceAuthziAccessCheckExAuthziAllocateAuditParamsAuthziCheckContextMembershipAuthziFreeAuditEventTypeAuthziFreeAuditParamsAuthziFreeAuditQueueAuthziGenerateAdminAlertAuditWAuthziInitializeAuditEventAuthziInitializeAuditEventTypeAuthziInitializeAuditParamsAuthziInitializeAuditParamsFromArrayAuthziInitializeAuditParamsWithRMAuthziInitializeAuditQueueAuthziInitializeContextFromSidAuthziLogAuditEventAuthziModifyAuditEventAuthziModifyAuditEvent2AuthziModifyAuditEventTypeAuthziModifyAuditQueueAuthziModifySecurityAttributesAuthziQuerySecurityAttributesAuthziSourceAudithm4m4mm4mm+4mDxW44ͫ#Eg]+H`00A0A\X\[UU[K\F\[L\[K\HI[L[K\F\[[0A[L6[0AUU[K\F\[\[\[K\F\[\[[L\[[L\[][[K\F\F\F\F\[\[
>[K\F\\F\LF\F\[[00A+
&0pX0`	h
pp
[(LCL@\[[
?6L[UU[K\F\F\v[[UU[K\F\F\D[[UU[K\F\[\[
[UU[U
U[K\F\F\[[ @L\[ L\[LL\[[\[[L[UU[U
U[UU[,K\F\F\F\F\(([L[0A+
&0A0A00A\8K\F\[\[K\HI[L[K\F\[[0AUU[K\F\F\R[[00A\,K\HI[L[K\F\[[0A)K\HIH[LU[,K\HI&[L+[K\F\[\[.
[!L\[L6[\0ABPK\F\[\[K\HI[L[L6[D2P
LI\[!L\[L6[\0A00At00A.\[L[	L\[L[0A0A0AJ0AB0A\0A0A00A+
&D
0^H	
$Z
jUU[K\F\[\[K\HI[L[L6[[[LL6[K\F\F\[[UU[U
U[ K\F\F\F\r[[[LHL6@[L66L66\[<L^LL\[[L6[L\[,LLL\[UU[U
U[ [(K\F\F\F\HF\$$[[DLLL\[[0A+
&00A00A0A0AP0A<0A4,\00A0A~.K\HI[L[L6[0A40A(0A+
&80A+
&"0A0Ar0Af%\20%\B:0A+
&T0A+
&B0A
+
&0A+
&0A\4 K\HI t~[L[K\F\[[0Af000A+
&0p$[K\F\[[0@LLLLL\[0A+
&0A00AJ[L6[!L\[L6[0AP2P
LU[!L\[L6[\0A)K\HI[L[0
\[!L\[L6[\0AxJ0%\\[
@%D@%D@[[
6L6[%\!$L\[%D@%D@466LfLj6Ln666[ptx8L[%\%D@%\%D@"K\HI[\[K\F\[[%\P%D@Q%D@Q%D@Q%D@Q%D@Q%D@Q%D@ [(6666666L6[%\R%\%D@%\%D@Q%\0A)K\HIN[L[[24
6\[!L\[L6[\%\)[ +	[ LL>[00A+
0. 	80`%\[L\[,L [L\[K\F\[\[[L\[+
0
L-L[!L\[>6[00AUU[K\F\[\[+
0(jUU[UU[K\F\F\F\[\[[L6[(
L4LT@[K\HI[\[L6[0A2
L[K\HI[\[K\F\[[%\%D@%D@~\)K\HI[L[\\~0%\000A4%\%D@%\H$L2L-[$)L\[%\)L\[$)L\[%\<[L \[K\HI[\[K\F\[[%\Lf\[K\F\[[%\HL2\[K\F\[[%\%\
%\%\%\%D@%\%D@)[%\%D@)[%\+
&04UU[U
U[K\F\F\F\[[UU[U
U[K\F\F\[[K\HIDNH[LS[L6[+
&

[%\%\%D@)[%D@%D@%\%D@%D@%D@%D@%D@%\%D@%D@)[%D@%\%D@%D@%D@%D@%\%D@\%\)T[\)T[\%\[L6[%\mrm\smrmmrm4mmU]%m%mUuj@m]%4mUVuyQF^V3@^];
mÐUEPm]UQSW}3ۉ];QVwEPE;	<w(;;j>؅QGCECECECwy;F,F,uQFFrQ
`6mjQSV%E|Q~Wm~<uF,;Fw	v@mWmE^_[?jW]m$jm]WKXfujfugjXPVSZX}XkFCGDQXvM\ejWm_ejWm>-8mo8mB7m6m6m6mVmOUE\P$2UES3VuEPV](E;}WuE};fFfGFGOOFkPvXQ 33Uf;GUFtG‹67m$7mt>΍QU𐐐fAAfu+MXL	MQVSE؃}UGEU9EsuoE8_E^[Pmt0pUQQeSVW}Gkj[#EvSeGMȋA	wg9m$o9mtPf@@fu+tF#GEE9ErE0E_^[k#SƃjWEm9m$9m8mI9mD9mY9mP
USW}G3PCmnE_[]jh:meuuuDEED3@mmUQEPhJmhmEEUQVEPj3juxmP|m`^H08@DpH0@$D
pH0@H$EX!pHpH0@,EH pH0@,FHpH2FpH1\"@F
HpH0@*EH
 pH0@*FHH
LpH	0@$DZpH
0@,@F^HHjpH0@H$EnX!HpH0@,@FHpH
0@H$EX!<HpH 0@N$GPTb H
XpH0@F$GZ lH
XpH0@,@FHpH0@,@FHHpH0@$E pH0@$F$pH0@)F,H0pH0@$E4pH0@$F<pH0@$$DDP!pH0@,DLHpH0@,@FPHH\pH0@*E`H
 dpH0@*F6
H
:
pH0@,@FH
HT
pH0@$FX
\
`
pH0@|`Gd
 h
p
 t
|
pH0@$4F
!pH 0@PE

 
pH!0@0"G
HH 
P!pH"08@D
pH#0@$G

!pH$0@$G
H!
pH%0@$FH
pH&0@)FHH
pH'0@*G&HH
 .pH(0@*F@HH
HpH)0@$FVHpH*0@$F^fpH+0@$Gj rpH,1\@FzHpH-1\G  pH.0@*EH
 pH/0@*FH
pH00@*GH
 pH10@*FH
pH20@H$EX!4HpH30@,@FHL&	HXpH408@D`pH50@*EdH
 hpH60@*FH
pH70@,@FHpH80@*GH
>
 P
pH9$0@V$G	X
Z `

H
XHHp H:(0@^$G



 
 H
XHH p$H;0@,@F6:	HFpH<1\FJNHpH=1\G"*HH 2pH>1\G:>H!npH?1\FHpH@1\GH!npHA1\F&HHpHB1\G.6H >pHC1\FFpHD(0@^$G
JN\ ~H
XHH p$HE1\GpHF1\@F,pHG0@,F0H(pHH08@D>pHI0@*GB\H
 rpHJ0@/Gf\H
nH rpHK1\FHHpHL$22$GZ 
H
XHHp HM(2:$G	 H
XHH p$HN1\"@F
.H:pHO1\@FH>FpHP0@@DHNpHQ0@4FHRH(pHR1\G^fHH npHS1\LFvz
~pHT1\LG
 pHU1\G pHV1\GJ NpHW1\IGz
~H pHX1\DG
 pHY1\DG
 pHZ1\FHpH[1\GH pH\ 1\ GHHHH pH]1\F
HpH^ 1\ F$HH(4DHpH_1\GNH
V ^pH`1\FpHa 1\FHHpHb 1\FHpHc(1\ F
"H*H:HH p$Hd1\FFNHVbnpHe1\$FzP!pHf1\,@G
 P! P!pHg1\F\pHh1\G\!p%mUE0S3W3E]];9]59] x9]$o9](f9],]EVEu5E Pf@@f;u+xE$Hf@@f;u+pE(uHf@@fu+XE,Hf@@fu+@E,PE44ujV}4L~,NMTV,VэLV,N ?Qu F,PFEPu$vPu(vEPu,v 0E4PFEu
Et@(F(EFEFEFEE00E^_[,jWmm4UVu~DGSmWjv4m~,FPӋ~$OHN,h@mmt
~<FFPmwGwwpwpwW덐USVuW~3WCmMF$PQ
HF,h<mm9^,uv4m؅tv8m؅tF,;FEWm_^[]~WӃ~,uv4mv8mWm~DEUeS]3@VWEEu}}G EPEPEum=eEE&FE}fFF1K`kHKWuHPK33f;Fs'3ҋF‹t#tFC;rۋE_^[t@jWXG1ېUE 3;A39Ut=E;t6fHt8H;t$;t9U"3E"33@]jWm2@̐UE3A|G]3@vUQS]VWSm}
}CDUL@#SM(m}(EECj XE9E3_^[$UE PHSVWt
9ȉM tXftWHtL4Puiu0},Wu VuuPuuuu+؅te,}(K9_^[],3볋p뮐UU03S] 39KVW},MMM E;vGu0(Juu$FEM,;9OFuj33+1EPju(FsPuuuuTt+}0j2w$Fu,#GhP	F!GFE,E,;Es3o3@_^[,Utm3ʼnEESVWEE]uUEE$j	EE(YeEj	3fEԍ}Yufu3u fEu}SVRUu]f(3;((F;(M3@}](*M9*PSQu uuVu6t
}s
E;)Ǎe_^[M3$UEVuW8J8EH[Ht
HȉMSPV!8] 39E8tAu$F0SuuuuWPv$v,V{?E0jujm3@[_^] UE39vVPu4Pu4A;r^]UEfHtH.Pu]@UVuW3WWWWuF0WPv,v$};t;_^]E(Eu
Em(uEEEPmEMƍ:u;YM3!R}$a-USW}hjW]tGj X9EvE39Mv5VPT3@4	T@	A;Mr^_[]Uhhȅ8E3WELAEPAETHEAE AE$A EAEAEXLE@<ED@EHDE4E8E<EAEE(A$E,A(E0A,T@P`@\3@_]TUE@SVu3W33C}}}}}M};9}8ut7U<;73ۅ7WmEMUQuRu^$PF,؅F,@uH~(Mu9M8ugU$<;m3ۅ@7JUE(RuPu MQ؅8}0Su0EM4PQu,<VD} }6_^[4US3VuC%DtPF,tP`WPP,Hk%_o%V^[]US]Vs96>^[]U4m3ʼnEEMS]VE W3E$;;;8PhPj
Sm=#u,;(PVj
Sm;(PWWWWSm=#u0;(QPWWSm;d(;s(3Wv(Cv$v vvvvvvv6WPQuuSWPr;Wvvv vvv6vv;t\9x'PhH0Qp$p,wQY;t
;tVY9tF9'M_^3[ jW'UQQUEMSVW3E4vLE+YEE4mM4EVPHm1EsuG;}rċE;_13@_^[UMvVESVW}ߍp+MN94m9<m,QSLm7Mu_^[]E8;uM3u@&EM;Mr2UE$S3W3E]]];9]9](9]9]9]9]9] EuxEVE!3,PEu3;!9E!MNMNMNMN M N$NFF(FEFEE$0E^_[jWm!
Dm;=m;ȋ3%Suu uuuVumUS]V3W} ?EEE.9C.uEPWuuuSVy.}v._^[ UeSVuWVuE@}EG,FM,3ҩtDN,] SWuuVuRuuu#te},_^[vĐUE3SVWUUU;)3@_^[(
Hm;e= m;Uȋ3G8m;VEH @m;FEH 9u?6%,mUd@0pmd
Q0zᆳuutP`+Pd rcU;utXPdm9MuS7@d m7E$m am7E(m`m7]%m먋EUVu3;usuu݃^]QQᆳPP
ch`mpm0m4m0md
Y=mEPDmSVׅF4mj_X4hhmhhmmXYYhhmhhm|Y=m3Y9]uSVm9,m4m֩hmh$mYmm3 3
骩UmeeSWN@;i5a5Уm_[ÐUVW0m=0m;2}_^th`mtm]j9m~v
m=mPDmjVׅ53m93mt'=m;+3S(m%m%mYjVmm鋨3釨95mĨ2F,0mȋF(+;EF$HF$jHjPF,PSh;KRR0ɋ@;"<@DS:jX;FFC%jX;FFjX;FFjX;WQSRRPV`PmPkmjmHjmqjmjmjmjmkmkmjmkmUSVu3W;t~]M;u;up};tiEH
w^$(kmF,0m;Evjzm3_^[]F,@CCF,0mPF,03.3@jW뼰0E_nUQVEP3jupmPtmtuuuum^Um3ʼnEeS]VuW}tE&EPjLEPjSmt]umPES.uuPVEPj8pPj
Smt,x|GEME_^3[Kc.␐UQES3V];EE;tPf@@f;u+@EED,P;E;F:mEWEEMFENFFV,QVPG;=E;*Puv-Eh8m0m;	_^[U(3S]VW33}܉UثF}UUu諉UUUUxE@@ };E;9uQEPEPumE=?3uEuEPEPCEE'fGG0EÃGEFjYEFMe3f;EsX]j{Zڋ%Mr$<qmڋFEfEf;ErEt
8uME_^[mE-F̂maM@@ 8E;-fHH1MX2ڋFt9jYf;uFbjYf;uFNڋF@EWMڋE;sUk<uF
EW}uEPjuEEFEjFZ}u.EPjumE=eEE؉FEڋFEFrEWume}pucmomhtm0pmmomlqmpmqmmomqmqmomlqmt.OFNGSuSp$E9]uSVRSUVu&WEPuEVuPu}_^]ÐU}t
EP$m]% mUQS]W3};`Vj ;;[}3@fEfFfEfFEfFEPV.EuEVF~3E^_[jhsmuFPdmeuVCEE'3@ƚmԚmUQEPhPJmhmEEUQeEP50mhsmEauditU0m3ʼnEUeS]VuWj	Y3}EPjh$tmEPEEUm*VuP4*EWmM_^3[*
<tm\tmڋFEjFZ}%m%m$m< m2m(mRRS}:'jWV'jY}EE4umE$]tw&=U,EeSXVpW}+x@m+mًUmw&E@}&}&uu2&E&}tE0_^[%,mmQRPh<fm?ZYjXfF6j
fFXrV蹾F(PSjdhjJ;F PSSSj;F$Pjh6jj;UQESW3G3ۉ};BVjHN;=ESFESWFE~D=mS׉F4;tdSjjS׉F8;tUSjSS׉F@;tG~W^<m;SSVhTmF$SS@mF0;E0E^_[];e3<WWWWuWPQ4u$SuuuuWQPVt{jjU$SV395m]Smjh h0VmMA;EA1qqYqqq q$q(q,q0A4q8q<q@ADqHqLqPqTqXq\q`qdqh3^[MQMQMQMQuVЋ;M;DuEPUju$u uuuuuu	] U$SV33Wuuuuuuuu9u%9uE$;}0EPEPEPEPEPEPWu;E;Eu3VQQuuuVVVuuuVPSuEujVP;tfjuuuVVVuuuu uuH;t;EM$PEH0Qp$p,EQ9u
;
EM;A,_^[$jWmUSVW3jt|VPExnE}0E0E70E 0E$0xPuu;ExP;xMu;v!];EL9Er7۹M;xȉEu;v7}OH7GPS躹EEEL;xr:}EMEM EM$u3;uxP E_^[ ESm>UVuFthjPmF$F(F,F0F8F<F@FLFPFXF\FljxjV耸3^]Udm3ʼnESVuW3SSjSv3GV}}]]]q;uQmj
v~ӅjvӅjvӅjvӅF3M_^3[3;t鐐UQQSVW3}}9}uumEuF9>2;FrQ=KHmkLT;4xjh#Wvm;^jL3YFMkLFMQuxWHAEEeE_^[E^m>jWxF$~mSecurityu_P芶W蛶Ejm39uEPmEmAPmPm3TUVu

FtPVh8mmuj`mVmj*Vm3@^]U}]sVwV؅}W菵^rjhmweuDEE3@薒%m3mUQEPhJmhmEEUVuW3GE&H k8PHH_^]UVu\FtHt8u
@KVu3@^]UESVWP3EP}3ۉ}}C;EPuuuW;E PuEPuuu1;E;t	MIAE9}&j4};j4WSʳC.CC0CC2C ́m{,{f{f{f{ EfPCcEKC4]3u];t
WSW9}tu|;tSp9}tuw9}tu_^[ÐE'EW}*USVu33W3C}MM;9ME@@ EPEP؅um=ukFEjĥmvmEPuEPuuvy؅~tE;FE@`_^[jWXADSQL$+ȃYQL$+#ȋ%;r
Y$-3Sju3@hPmj
Y}uMM.MQj(YRP]}h9]EPEjYRP]U|֋}t8;=mw0 mD8;r#PtG܅tStcku(G;rP$m؅t
Heapuj8EÉE`}t8;=mw0 mD8;r#PPtG܅tStcku!G;rP$m؅tHeaptuSvv<*F}PuSuuu uuVuuK`;HeapS(m9u(fEPuuftn}K@zuԯ9utu¯M;A,9Et
;t	P襯M90t
0葯MQP腯3jWm3Nj?P`~P%EPf@@f;u+xEHf@@f;u+@EEHf@@f;u+pEuHf@@fu+HE MPf@@fu+XE^jEmWuF,PF֮FNj}WuFP迮FNj}WuFP訮FNj}WuF P葮F Qu PF$|<331jWm3錮jWm3j}mjWm3]jWm3Hjm]4PmPm+W]mF@=m;tP׋F4;tP׋F8;tP׋F0;tPV芭jWm3jm!]B؇m逮؇m郮wv@metPmwtS}hu[AjWm33jWjm3MmPm3zE;FP螬xE@HfMH@Pme}u[tyPF!>ljWm3Q*9]Z3!EjmE FE$FE(FE,F TEEt@$K@ C3yj}mUjWm3LjSF8pE9]uv(v v$F;tP^VXummm3cjWm3fv(v `v$XjPmPmj@P0PPP3;m9a9tXVmBw8m3139UM;AE(]Sm}}$Ql3 H
HFȃMٍV#ʉM$t
{xMQMju(sHDPuuuurE}$}1EPu0Wu$̿jvu,uvrE9MQju(FsPmD0PuuuuEMQ3QQQNQuH0Qp,p$jEPju(FsPuuuuuFGiGjw$#Nu,	O #FhPI[FMQju(sHDPuuuu8F$؍N#uFGMQu0WP芾Ek(L9Nk(NjH#N	H 	fHHHFMQju(sHDPuuuuYe F$؍N#uAFG6ELU RsVPQ} F#G	G MQu0WP螽Ek(D8FELU RsVPQ^} EFMQju(sHDPuuuuqe F$؍N#uFG}I}?MQu0WPܼ)Ek(D8FELU RsVPQ} jvMQju(FsPuuuuFGe FPmMQN+jQD0PEPQPJ=/u ELU RsVPQu3q}tE } MQju(FsPuuuuDFGe FPmMQN+jQD0PEPQP=/uELU RsVPQuV3@9EuE } }0jsvu,ju0W藼|HM;;]K,1=$m;u
Tm3uEe}x}G8E /MOu
}$II	MQPuEpwVuC0Ps,s$Eu*9Em;
Pm3LeMQMqWSP}U(M,3@/J$R39C	MQPuEpwVuC0Ps,s$<Eu9Etm;u
Pm3t}GEE};E3m=rh'mVrZ!M a39w E$M,Ptt9ptȋqpPut*u0Wu VuwPuuuug؅FE,E,;E(7뀋EEKE?tN<16V.3;39;aEMPtt9xtȋyxPuSuuuVPWuuu!EM;MF t ju$u jh P3Vu$u jhPVh"u,Vm3@uDmju$u jh@S蠺fF f] ju$Sj	h PlHPu$SPhPWV3;3G8E$WSPufHLuVjafHNuEPEPu$WuuuSV[Ot}tWSu$LuVjp}WSu$LuVjoM+E3m3EVPHm|E4KuLG;}`PmPm3L9omdPHP=P躟P'PPP莟PPPPPWXE;CuSuTmDGL;>E*mE~hjSm8Mjm3jm3dE4m;rC;]I30E4m;
C;]uk9utu^9uuMuEPE3P]]R5u]NN}}}3wN}}dEPEPjjEDmumEPEPvmum=t}t~H}}39]t7EPEPSWEDmtSSjuEPV;F9]v=\m׀8vtvXmHPvӁ8tUvHPvӁ8t>EPEP3WjEDmWWjuEPV%;F3jD_9]t8EPEPSj}mSSjuEPV;F9]t8EPEPSj}mSSjuEPV;F9]t8EPEPSj6}mPSSjuEPVi;EF9]7V6];+VSc0u[;EPjVh`mhdm;u:EPEPEPVh8muEPm;u}tuuhmEttt9uuxP^j2[;u	9uNExP;EuxPc;ExPNmj[E07}u;tPɚ7E }0E$0;iP誚7\UseGroupRecursionSOFTWARE\Microsoft\Windows NT\CurrentVersion\AuthzEE3@ËeumPvPmPm3EE3@ËeumPvȞEE3@ËeumPv#PmPm3#jmwP]&iuuuumF<F,;FSv@f<mA_[3^]}0mpuGtPpmYWߘ>MQjWtuqt~t=u2jjV]tEJEtWuStV@;thmjEj9sh,mrYuWu,mhmjjrYutЃu6vUmuQuЉEE	MPQFqYYËe3uuuE	MPQ"qYYËe3uuE	MPQqYYËe3uuEVVutE	MPQpYYËe3uEVVutE	MPQpYYËe3u(m;;uEVVuE	MPQepYYËe3u
uE	MPQDpYYËe3uu95mtEuuuЉEE	MPQpYYËe3uutVEP$mu3um3m3m3EPmE3E3;tmuO@5m։5m^FEP$meW>jjWS舔jW蠠W!96u_|Mt}u8uUUك m$m(m*XmlSchemaFileParameterMessageFileEventMessageFileSYSTEM\CurrentControlSet\Services\EventLog\SecurityobjectClass=*-127.0.0.1localhostHmؠmU}wErw	M3E]UME;r	M3E]UHm3ʼnEEUS]VuWj	EY3fEԍ}RfS3VỦ})E;u3;uWju3@t
hPm̋C;uM}EMQj(YRP}}hMЅt;;
mw3 mD;r&PYtEЃtStcku+MЍA;rP$mt
HeapujSjWssEȅCEЋtFtMčV
MхuPju=tu	jh"FuuuRPu(EЅv&OUEEEăEA#(MuFHttxtЋJHu%MЅvG(IuWuSF	u4uẼ8wuWPSVvWCWuWuSVvR?D39Ku!uuWuvvPSvuQWQuvvPSvuAEȅt"}tWuvvvuSv'EȍE;tt?HeapuW(mEȍe_^[M3UDm3ʼnEEUS]VuWE̋Ej	YEЋE$Vu Eu3ufEԍ}RUuf'u3C3;uMuMQj(YRPu}
hm}ȅt8;=mw0 mD8;r#PftGtStcku%G;rP$mt
HeapujjVsstVuu uuuSuE;tt>HeapuV(mǍe_^[M3蛏 UMV3FtKAtDHt:;uAHQ(;tЋujW3mjWm3^]UQVuW33E@9MuEtGUEPQWuQQuRVuͿ_^UEujWm3"uPuP茣}
PmP3@]UEujWm3"uPuPq}
PmP3@]Uju$u uuuuuu] UVut}t}tuuô3@
jWm3^]UEujWm3+uPuuuuPI}
PmP3@]UM3@tEtfUfQEu	Et
jWm3]UM3@ujWm3>UVtu1tuqtuq^tuq0m]USVu3;ujWm3pW=mjv8;t	PmRv4^Dm؅t@jv0ׅtPm3*FPmv4=mv@v8v0V_^[]UEtmMub@tYtUPtUPtUPtUPtU P  tM$H$3@
jWm3] U|m3ʼnEESVWEE]uUEE$j	EE(YeEj	3fEԍ}Yufu3u fEu}SVRUu]f0u3x3;uSju蚱3@]t
hPmʋF;u-M}]EFj
Y}u}4MQj(YRP]o}h9]EPEjYRP]E|֋}t8;=mw0 mD8;r#P豶tG܅tStcku(G;rP$m؅t
HeapujEÉE`}t8;=mw0 mD8;r#P@tG܅tStcku!G;rP$m؅tHeaptuSvvFE}Ev4M,])}MO$EE,U#E
tm(MujuSjj6s}u)u!E8wuSPu uuVu辮 uWSuuu uuVuu8t!}tSuu uuuVuE;tt;HeapuS(mǍx_^[M3(Upm3ʼnES]VW3}E}};95mhmsYYh$~msYYEPhWhmhdm;EPEPWhWWWsuTm;}u
5XmjSjWhmu;tQC;j'MQPU;uEPf@@f;u+DPEPjWhmu;CK;t2PUf@@f;u+EDPQjWhmu;
K;t2PUf@@f;u+EDPQjWhmu;K;t2PUf@@f;u+EDPQjWhXmu;K;t.PUf@@f;u+EDPQjWhpmu;uc9{thEPEPWhWWWh@muTm;u;}9{v=C EEjHQjW0u;uEEE;CsjWXP}m5hm9}tu9}tu9}tu֋ME_^3[ObjectNamesExecutableImagePathProviderGuidEventSourceFlagsMicrosoft-Windows-Security-AuditingU<m3ʼnEEESdmVE3PhVhmhDžӉ;tYW=<mPVVVPPDž׉zuNP;tѭQVVVQP׉I9D(PhVӉ;I=PmPVVVhm׉u9	PVVVhm׉u9PVVVhpm׉u9uuhm9t9t99Džz_9thm9thm9t9t蔁9^[umM3Dž[PVSBk(9"{+艅PVVVPW<m9PhVsdm;v;+PWVVhmPmu39ȃ{+PWVVhmPmus9ȃ{+PWVVhpmPmus90hm(;	Džjhm[E39utvEPf@@f;u+t`9ut[uuuV]EE/EEPZËeumPd[EE3;}uPmPujWmEo[[mlmjhhmZE39uuujWVuuVy\EE/EEPYËeumPZEE3;}uPmPmEZm#mj$hmCZ3}}9}9}9}u/EEPEP蔂uEPEP,;EPuȀu;tv}wc}uuuuW[EE2EEPXËeumPYEE3u;}3PmP3jWm9}t
9}tuY|Y"m3mU(m3ʼnEMEVRh3VQPdm;SWVVVVVVVPVVV@m;uJ<mPeVVVVPPӅthmVV9tDmDHmPLmu%VVVVPPVӅt_[M3^E{UMV39qv3ҋAD F;qr^]UE VW3}}}}};u;v8E;t@MES;tMQWppWPW;LEWvvD@<v,v(v$uuuuuvuP<;twEW<@Dp$p(p,uLPڢ;t1EWPPPVE;},PmPm3m9}tCu9}uCFyAEM H0Qp$p,EQ9}tuӣVm[
jWm3_^UEVW3}}}}}; u;9}t	9}9}t	9}8Sm;tMQWppWPWE;LEWvvWWWWWWWWWv vvvvvuP蓠E;UEM};vGEULuPtH0Emt7E0mEEE;ErEPEjYRP}hjWӉ}}9}vUEULut0EmtEPE0mPu|EE;ErMF(E;sj;t*PHwE;tuuv$v,PE;4EPu059}t2uvE;tuuP諤E;@vuj!}W<DuEMH,EMH(F$EMA$EM쉈EM􉈴EMEeeD<M<@M@EMH0Qp$p,EQȝ}u43m9}tuu9}tuu9}tuuVӋE[
jWm3_^Uju hmuuuuuuw$]ÐUju uuuuuuD]UQeVW3G}ujW3^GEPhjhmhdmuuut3}t	uhmuVm_^UVW33u}h|tVPptEpMMQPfEVEPEPV脭_;^tEPuuuuÐUu@t]U]tU39UujWm369UtE;tfHtH;t@;t9Ut9Ut3@]UES3VW;tk9]tf3;E4fwM}k(3fxfvxXXX X$;u
3f;uH+xG;3f;ujWm3_^[tpTB;U{E9]tk(Puu*s3@UUS]Vuk(A AWׅt3@2F;us"9k(Lf9yvQ(#F;ur#_^[]UQESVW}tS%E39uӅu#UtXP$P$PA(;sHNjE39v=uM	ӅtH$HX#ωH$B(;r_^[US]VuW3WSWWuF0WPv,v$b;t%;tWSWWuWPQ9_^[]UQS]u3hVWSm}ȉMt"Hm;u= m;u3u@0e}v$U:;uM3tEE;Er3_^[B퐐US] C3VWMMEM ;w3@_^[,3C+AHGZHHC5mȃHDjY3uE@PuuuuW3}C$؍K#},uu(F N#CusWu,u(u(ELURUrSPQO9}},uWjsu Wu,V9}0MQu,u(P…suu,u(dELURUrSPQ9}Xjsu u=5mCjY3uE@Puuuu},uE(H HхKsju,u(C3P}muMQK+WQDPPPV=/u LMQMqSVPu33@9EuE9}x},'jsTC5mЃPj|Y3?Epuuuu C$؍K#}0MQu,u(PjsE9CPm5m|jY3EpuuuuEKQuH0Qp,p$$5mjY{3uhEpuuuutM},u2u(jv$NF u ##ChP蘏F #C	Fjsu ju,u(苄CE ؋E ;EUeeE3SBVH?WU;H ;Y;E#‹EumumH;rfэU;rZE ;wSH;rF39u v(E4mH;r'9;r F;u rۋU;rWkujm3Y}tEFEFE<m~EEPvuӉE}$eVkumPmE_^[$EM u!NjE3~EwVENUM<7mMEEPF47ӉErEEEE;E rE$}UFE V~FvMF(OuH0E(0-UE	jXt#ItItItItIItjWm3
MM!]UMEk(S]VuWM3UGUUP<u%E@tIPtAU :f	9xt3P	:*Et$ӁUtU$:f	xtPփ
EU(;sfQuf;w}~:Uk(tV]k(Lff	xtH	
O(_^[] U}ujWm3MtEtt;Au3@]UMV391v;US]]ӅڋYt$Y
Y$F;1r[^]Um3ʼnES3VWfE]}f33lp=@mh@mEPuuE3׍EtlPhEPDžlpDžx@|u<m}uHhmEP׍EPjdEPjEPu8m|}r}u9utulmME_^3[GhEveryoneIncludesAnonymous\Registry\Machine\System\CurrentControlSet\Control\LsaUSVu F3ɃWMMEM ;p	]8}(3FG	M82+HbH	FȃMٍV#ʉM(t
MyM8QMju$qMHDPuuuu6M8	E}(}0uTG Ojw$u ##FhPЈG #F	G},h}8^E,H #N	HKjvu ju0W}},.}8$jvu ju0u,
}4EPu0Wu({jvu uu0WA}},}8jvu u랋E9e8M8QMju$FqPmD0PuuuuM8	EjE3QQQQNQuH0Qp,p$E9E8PEju$pFPuuuu茇M8	Eu9E8tV},tP}0u5E,Hjp$@ u ##NhQ#E,H#N	H jvu ju0u,|}}0u2G Ojw$u ##FhP̆G#F	G ijvQE8PEju$pFPuuuu貆M8	FM8QMju$qȃHDPuuuuuEE8	F$N#}E(u
}8},t}}(uG}0u5E,Hjp$@ u ##NhQE,H#N	H <jvu j%}4t*EPu0Wu(cytjvu uu0u,z}B}(}4.EPu0Wu(yjvu u	HHHFM8QMju$qȃHDPuuuu,EE8	F$N#}E(u
}8},t}}(uG}0u5E,Hjp$@ u ##NhQ袄E,H#N	H <jvu j%}4t*EPu0Wu(xtjvu uu0u,ky}3E9E(ud}0u
G GЅFvju0WELURUrVPQI}}0jz9E4EPu0Wu(owjvuu0WSELURUrVPQ})jvFM8QMju$qȃHDPuuuucM8	EeF$؍N#u2}0u
G GЅFvju0WYe}4MQu0WPuvpvuu0WYELURUrVPQ}/jM8QMju$FqPuuuu{M8	Eu9E8tV},tP}0u5E,Hjp$@ u ##NhQE,H#N	H jvu ju0u,w}}0u
G GЅFvju0W'geFPmMQN+jQD0PEPQPS=/c}yEmM8QMju$FqPuuuufM8	E}0u
G GЅFvju0WseFPmMQN+jQD0PEPQP蟁=/u ELURUrVPQu3q3@9EuE}tH}0u/OG jw$u ##FhPsG #F	Gjvu ju0WhuFE E ;E3@_^[4UU M,SV339rWuuE;vE(}8(Iu]$CEu;w3@_^[(U 3C_+H%HH3C5mȃHDjY3uE @PuuuuY3}C$؍K#uSCu(FELURU rSPQ)9}},WasuWu,V9}|MQu,u(PrdEM(k(DCNELURU rSPQ9}%Wsuu5mCjY3uE @PuuuuKeCM(ACPmuM$QK+jQDPPPV~=/u LMQM qSVPu33@9E$uE}d},j!s@Cp5mj|Y3+ruuuuxC$؍K#}MQu,u(PpjsE90CPm5m|jY3E puuuuEKQuH0Qp,p$!5mjY{3uWruuuut?},ju$u(v$Cu#FhP|C!Fsuju,u(qCE؋E;EsxUQSVW}fGGtu!EljEuWVf39U0t>9U(vM$Y]] B(;U(r狎MM N,MN$M N0MOu3tOtu,u(u$uWuPuu uV؅u3e}voEMPu3t39xtȋyxPV{t&u,u(u$uWuPuu uV؅tEE;Er}0tM(vE$P!(Iu_^[,U3S]VWMMMM;JCE;;EH,1=$m;u
Tm3uEe}Kj_+a+s}URQuwNLQuH0Qp,p$zEu?9EmC=mȃHt;K
Pm3:}ELeURwSPQ8}C$؍K#EtMQM1u Pmu(Cu$P7suɍURQuMqsVuH0Qp,p$1yEu*9E=m;v
Pm3eELeURUrSPQc}2sURQuMq΃#NLQuH0Qp,p$xEu;9EC#Nj=mHt;
Pm3C$؍K#EtMQM1u Pku(Cu$PE0ɍURQuMqsVuH0Qp,p$wEu9Et9=m;u-
Pm3u u(Cu$PE0sju ujEKEًM;M3@_^[$3UUfBBtu!E‰E},S]VWtnu t0}$vCNC+}8 x<$9((Mt}$vM$C0 p(IuuEEuF,EF$EF0EBu3tBt<zRVzu0u(u$u SuWuPuuuVpEu3e}vmEM
AtOtytBыzyt2QVGzu0u(u$u SuWuPuuuVEtEE;Er},t@E t$u$v2PK+Ëy!9:!<((NtE$vKQ!(HuE_^[,UE HSVWu3tHt4p]PSyu0},WVuuPuuuStwe }(vmE$M Pu3t39ptȋqpPSyt,u0WVuwPuuuStE M ;M(s3@_^[],UQSVu33W}9OMEtFtEQu^uuuSvvvWuEu3CEt"juuuuSvvvWPE}tuuWE_^[UVuWVuxVu3tNt<1~tNu3vu(u$u uVPWuutfS39]v]EPu3t39xtȋyxPu}wu(u$u uVPWuuItC;]r[_^]$UVu,uju(u$u uuuuuVt,t#u,ju(u$u uuuuuVX^](US]CV3WuuuEtCt;uuÉESuv}0t&uDmuVWu(Vh@PEhE@  t%MEtjWu(Ej	VPhE@ tk	EjWu(jVPhu,39MQWu(	EQhPPjhM(F+Ή}0]U	t	(M0Mt3VWu(jhPhVh"u fuVm3@EPE39HRWVu(uuSPuEt`v'M(F+Ή}0]U	t	(M0u]}$t!u$uuuSWVuulEtu(u u}E_^[,USVu3FWtu^u}vvEv#PSG0Pw$w,Wu3mMytjjuTtjmKt2uQvvvuSQPWtExuE0jus3@_^[]UESV0W3vM9Pu;YtG;r3_^[]3@UQSVuWt&t ];u!HkPVSLSpw3_^[evFEuShuAs"uk|uEEE;sjWX밐U0m3ʼnESVuW33hSPLPhPS/;}
P(F9Pj5;}P(u.3*P_6;|P{9t19t6;uZL;V;v3FpHkPFtKFl;uj_PPPm39tt0M_^3[KUV5mWu3h@WWuW=KuuWWWuW_^]UVWumMj<^Uf1jS^f1j^jI_f9jD_f9j=_f9΅v*:f<}Xmf9:f<}Xmf9BHuj>Xf3_fA^]UESV5,mWj3[8EPEPWEPWu}}]օmzt3EPIE;u	SmދEP}I;uuSIjۍEPEPSEPuuu0IS*I;tEjY;t~~
~
E3@_^[UQe=|mt5EPjj1su1Mw
mQr%|mE
m3U<m3ʼnESVuWPv3DžmPvd;0PWPhHmWPVhm;tPdmYVmYY;uj[PVmu$@4tj[~L;~
~C>Wlm3Yv(jjj0p趏؅uF;r3ۅtWxmY39t
mY9tEM_^3[GtokenGroupsGlobalAndUniversalU<S33VWu]č}ȫ3fE܍}ޫfF4]]]]]]]t		(Fd;tPEP@mEPj EPEPEPj EPSo;}PmEEPvhuto;|v\mHPvXmMQPhu3o;|EPEPu
o;|}]9]vFEP7un;uSSwSuVuEn]9]uEE;Er]9]tun9]tuen9]tuXn9]tuKnE_^[ULm3ʼnESVuW3PvhDžm;F;HPQPWPhHmWPhm;t2 t	
9mYmYY;PmPlmv)jjj0pV7؅uxG;r39txmY9tmY3L;3PdmYj[39t
xmY9t
mY9tPM_^3[CsidHistoryUVWEPu3huuuuul;}Pm$S]3u?vj_
PB}3v3ɋST@L;rEPEPWVukE;Ev#WMBEP]BEEE]3!uvXEEEP3u&k|fuEPjjuuAujeuG9}tFEEE;Er39}tuj};t}9mPm[39utuj9utuA9utuej_^UM3Wtv…|YW}v‹U3f
@ES3Vt#U++Ѝ7tftf@@NuuHHz3f^[_]UVuWEPv3hu}}}}j;}Pmv\mHPvXmMQPjui;|ƍEPj	ui;|SEPE0uhiuLi;}SmWWjWuVvu%i;u3[9}tuh9}tuh_^U(VW33u؍}ܫEEEPhEPVuEEEE#;}
PuS^$S~(WFPju
+}
Pktytr~~hPRVQVPV 	N4@@@PG?F,uj5ISqRP@N,3fA3jW^[}tu$_^U,VW33uԍ}ث}uu9w@t3Sj[EEEPjEPVE]EEw";}
PbG8Pju
#;|w<Vju"|ϋPN>G@uj^VSqRPO@3fAEP`muj‹EHtHt7Hu39HOD3}[tu9)}tus#_^EPjuU"%EgD8uHtG8@tPQTmuGD돐U|m3ʼnESVuW3EP}܉}ԉ}}}؉}Љ}0؅9}u5VA؅F8HtFtQPTmtj2[`FF tSjmu
m/gFffGFfOfG
OFRpQ<F t2fOfGF ffGGȉOF RpQy<
3!GfGfGhmEPhmEPi}PUhmEPhmEPEPuBi|ҡmE졼mEEPdm}PmEPEPEPEPEPEPEPjSWučEjPuh3;mEPQQjuMmum؃zujm؉]̅u
mEPuSjumt܋CuC3PPsP3VP3;OMQPPjuEmum؃z&ujm؉]؅rEPuSjumWE؃e8]vJj	3mu)j3muPPsP3V謂؅]EE؋M];rF3MQPPjuEmu
m؃zufujm؉]ЅEPuSjum;v,u9Fluj[PNpMCPNt3Pm3ۃ}tu9}tu9}tu9}t	um}tuf}tuuftWK9tFlt
P:9flM_^3[9Authz   KerberosAuthzApiU$ee3VuW}૫FhtPEP@mEPj EPEPEPj EPjb}Pm!F<VpuuV5u}tu]a_^Uhm3ʼnESVW3u3ۉ]}EPj EPS]ED{a;}Pm[9]tVu;uGF8Vpu;u2EPEPSjmumVEPu;u39]tu`M_^3[8UQQSVu3V]];uLW9^Du59^Hu0F8@;t=PvTmt/EP]^dJ;u9]u.EVu_^[~LWv,v;uFd~L;t@$ty^XSjvdGatK=utA$tQ`W3hPPv,PmuSjPFdav@tuVEVLF<@t'PvTmtFdFhFTFXF`E~PWv@NhFT@$^\SjQi`ta=A$Q_W3hPPv@PFTm?S~T?jW~h`F`@ia3@VVHLUm3ʼnEMUS3VW3]}]]9]2rf;#f u
AAf;uf9f8 t
@@f9uf8 u3fEdmf8f;:uf;tfxf;zuf;u3;uO8^FHHHt4HHt^tj4;jMQPmTPFHHtGHt4HHtuZQmYtLV(VQ!umE6QmY;t#EEM;EE9EtEWME_^3[T4E㐐US3VW3ƅ|j]YMj^}Eu]}]E]}]u]}]u]č}ȫ]E]ԍ}ثEM]}諈]u]}]umE;Pff;u+|W$3E;tbWuP,3j|Puwu@uVujuujuVuVujuVujjSh$~mh
jj:~\ju_~u
;tPmOu9]_^[tup2UVW33u}𫫫EPj(upmPtm;t-jXVVjEEPVu3EMEm9ut	um_^ÐUM3tvW|9SVW}EPuqVW3m|;wtz3fw_^[]ÐU}'sjzXLEHQHQH
QHQHQH
QH	QHQHQHQ0hmuuJ83]{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}USVuW~3WCmMF$PQ
HF,h<mm9^,uv4m؅tv8mWm_^[]Um3ʼnEEES]E VuW33h|QdP`/h5jPƅ4/3 3ffP=w4P/؅uj0PS/3AMtCt#j_}Cuj_39SutF$F C(9uN(RK(v(Pm3A9uH	Kt}CHf kQp`P.`@,tlCjSj.Kt6f9Q`K39Qu6@u0Dž;ʉ~%EMt(ukP-jPb-~luk(L1}(1BtIuHk(f1f03fpxquj_ff3fs$Ws WWPjhWhjjsWsWsWvWwwj
PjVqytuos$Ws WhdmWhWhRjsWsWsWvWppj
PjVypt]G,8C@Ht!8u@tQ+C@`G,KIAKjWm39tta+4;t
tSM+M_^3[+UV50mW0mv umYYt6;u3_^]UHSVWEP3jj3ۉ}E}}xmP|m5mu-֋؁uEPj3pmPtmu֋;u4EPj8EPj
umu֋j3Y}uM}t	um_^[UTm3ʼnEESVuEW3؍N#hP}ԉ}mYY;u|mPdmY;5mtjhSփ;ujhSփ;ujhSփ;uEPuh9}tcEPEPE mtJEԃwBj$YfL3fLjY3}jEYMĉEpffu+EE3hPWStm;tV!EЉ;tEЉ8;tSpmYM_^3[W)UVuFPmuFtFtPpmYV(^]U
0mE@0mA0m]UESVW3}}}E;uE mj`mSxmut9FPmEP$mM+NEFwhaSmEPuEu@EPf@@fu+DE(P'uXE9Et
upmYt4jSm;t
OH?Smt
OWE_^[uF(uF P'EFFP$mjSmt;t
GA?uEt	VaFPmSmEt"MFtPpmYV&LE0?7a4381a8-4be5-4e62-911c-cc20475dc920Ucsm9Eu
uP7YY]3]ÐUuuuuhH5mhm]Ð% mUMMZf9t3]ËA<8PEu3ҹf9H‹]ÐUEH<ASVq3WDv}H;r	X;r
B(;r3_^[]ÐjhmemVbYt=E+PVYYt+@$ЃE E3=ËeE3fmm%mU(Ȃm
Ămmm5m=mm
Ԃmmm%m-m؂mÊmEЂmE܂mmЂmԁmȁm	́mmmjmhmmh	pmPmÐȁmm%m%hm%m%(m%0mmd%mUQ3E9EuEP50mhXmXbMQPhxmu^RELSARPC_ENDPOINTlsarpcUQeEP50mhmaEsecurityeventU]%mUE|]UQEPh:mhm@EEUQEPh
<mhm@EEUQEPh=mhmr@EEUQEPhb>mhmG@EEUQEPh>mhm@EEUQEPh Dmhm?EEUQEPhDmhm?EEUQEPhGmhm?EE UQEPhLmhmp?EEUQEPhLmhmE?EEUQEPhLmhm?EEU}wErw	M3E]U SV3j^C=mEuE0mEmu&EP]`m:u}um%m9mupW3EPhjthMu4EPEPEPjhmuuMu
9uu9utuGsu
}EE_^[ÐNeutralizeNt4EmulatorSYSTEM\CurrentControlSet\Services\Netlogon\ParametersSYSTEM\CurrentControlSet\Services\Netlogon\Parameters\GpParametersU}ESVpWtfvf>\u
f~\uGPA؅u
P
WVS?3E_^[]Um3ʼnEESVu3WDž;};f;v$f\uf9NuOO;uDž";4muWV<mKr؋mw3PPjӅt;uWVPKtFf|~.uOPPjDžӅt&;uWVP@Ku	M_^3[

|mhmUQeVuWu33AEPvPs|}t3EPjV}
u;EM_^jh8mE03;tcuv^v3~F9t-]PmEE0ËeEuFP$mVmmUQVWjuuFPu}EP"uTIMUE0_^UQQEpEP@muEPjhpm3E8u~EPuXE;|I}EHQuVp#EEPËeumPEE}	EP[EME m1mjhxm;uu܃}
u

u
ee}|}
EPuvEPuv2EEME>EEPËe}tuumPEEu܁}.u}utE
VE	mmjh0m3EEtse8TIMUu`j^uEP+Eu-EEP%ËeumPEEEPE3@ËeEmmmmUMSVu3391tI;vE9Yt;v<IW}ttttQt|;s
C;sѸ_^[]j<hmE3}ĉ}ȉ}}M(;tu;u
U;u

Pv
~UEE3C9]u
E8E8}ĉ}ȋE;t	UĉEȈ]jXE tHHtE
}jWu$uEPuEPvEEȋMEMEEPLËe}u}tueumPEE3Cu3}t
}.iM(;t]u$uEPuEPvEM;tB}؋Ek}܉u9EsUT
E}u1V}E;uEEVWPPEEċk]ȉEĉ}܉]Ћu;sˋkEMȉELUȉLDMȉDEHQpSEȉ\EDMȉDEDE܋E3늋EEPËe39utuu}u9utuyuumPpEE3EȋM9}tuF9}|CE0uEP;},}u9}t
uE8];tP;uE:$mm'm8mjhmuu^EPVw|NeEPuuv%#EEPËeumPe}E}	EPEMxZmkmjh0 mE Mu<ePq#EEPËeumPEEm	 mUu{3]UQQS3W}]];u

VuSEPSjEPuuVu#EE;};vUIuu؅thujS}vjuE{EFGFGFGPvuEGFEMt뾋ut	P&EEuhE^_[,mQRPh\fmSZY4mQRPh|fmSZY%4mUS]VuNWQt^1x;s=EPF$jYRP|&E8;r؍V,
p;rȋ;u3_^[]x;rEPF$jYRPh|؋E8;rV,p ;u;tx;]EPF$jYRP|E8;8V,p;#;Wx;EPF$jYRP0E8;
US]VuNWct^Cx;s=EPF$jYRP:|&E8;r؍V,
p;rȋ;u3_^[]x;rEPF$jYRP|؋E8;rV,p ;uN;j;tߍx;TEPF$jYRP|E8;/V,p;N;;Eۍx;EPF$jYRP6E8;
UQEeVW}4u;sEE MASwtQ$G;\uY,F3E;t6}NU;U0QOvP6E;uЋ}M+lj[E_^Q$G;uY,F3E;t}
N U;UVWVQWfOfGv$P	6E;q븋Q$G;wmuY,F3E;C}NU;Uw=QfOfOvP6E;ȋQ$G;vEuFq,u;tYY^	;MuE
UEHt"HtHtHt
t2
f]U3Et@Et]UMSVW33f9}Eu4U:uEf9Au"QU8Et%;u9AuIM;u ;t
_^[;tIM;t3u9EvߋkMf9tf9At9Atf9A
uQub;u8Eu8EuUtu9AtQ;
tEQ;t	9AG3;I9A9F;Y;t	9AE;Q3
f9Bf9t|A4fFf;F
w39BteE9]s^3QQ;t	9A3;vBq~f9t/f9Gt)ƍff;Bw39tC;Ys9At9AuE
};`uFu;uPlAUMS3f9VWUUu4E8uEf9Qu"AE8Ut(;u9QuIM;u#;tE
E_^[;tIM;tU;v]kM3;tf9tf9Auzf2BBf;u+zQur;u}u#}uUju	9A\Q;tEQ;t	9A 3;I9A9F;Y;t	9A3If:tzzf2BBfu+@;s\ɋY;t	9A3vDI9t5f:t-zf2BBfu+w9@;s9At9AuE
}@EE;E1KE EUSVuWPf@@fuN+DWtn{X;<~EPjYRPUE;3҅/v;B;x;^EPjYRPTE8;evxf@@fu+;rE9]ҍx;rb^EPjYRP|E8;r?ev_vxf@@fu+;rE9]s4֍x;s/EPFjYRPx|E8;r؋U3

_^[]UQQESVuFWqjM}FWʃ+ύ<;eUȉz}+ك~ENTU;Mȉ9QNR4W}+]EE;F뷋}FWʃ+ύ<;y}eȉWU+ك~UzEE)Ex
ENNjLQUfAAfu+MɉM;VUWUTWUQfOfWNtREE+؃EE;F낋}FWʃ+ύ<;U+ىz3}M9NwMUFx}f8@@fu+E<;r_Jf<Jf|RMLFUW4QX}+EE;FsB땋U~Bȃ+M;s+MWAvP
Eǃ+؋M3
_^[UVW}7juFP|mu66;uS];wF ujuFP|mu?;u3[_^]UEeS]V,0WEuuE,;Eut\tK;Nu~~33ujfCfEfECEfF fEfEF$E;FuEC;Fu=EffEfECEFjPEP|mu;^uE;FuE}E/M8}MEtME;@EMtjtK;Hu{x33jfKfMfMKMfH fMfMH$M;HuEK;Hu=EjPEP|mu%'ffMfMKM;XuM;HuE}EE%}ueE_^[UVW}hSeAtj@Pt:j@jV03ɍFfffNWN@PNmF,@F8@_^]UEhSeAtj(P虍ЅtWj
Y3_]U}EMVt"@ uqPW~z2VH A_}t@ uQrpBH ^]U}EVut@ tHP
Q` tN}t@ tP
Q` t^]U}EMVt"@uq8PW~z2VHA4_}t@uQ,rpBHA$^]U}EVut@tHP
Q`tN4}t$@tP
Q`tN$@tN(^]UE`VujjPVN(^]UQEf@VW}3f;GtE
S3ۉu9wuUBȅ~A~'t
tu-PGؙRPuPGEPGt4R;E
39E9;tFVu(OtItuGDGMDGP@Gt]t$GDFvF(FO4UOEVLNOfLfN V N(RN$WtQ"GfFNfFF(FQOtPG؉NDFjjVubEC;_svE5E[E_^UQQES3VufFW}]]f;GtE
9_]Fȅ~?~$t
tu+PGؙRPPGEPGt4VYEE
39U|UM;tXAuQjRQVuuTAlF(EC;_fF$;F(u9F4wEE_^[E%퐐UMjXWtv…|[W}v‹U3f
@ES3Vt#U++Ѝ7tftf@@NuuHHz3f^[_]UVuFu2FP6u%:P$H,VfPfVPVFN 	,;t
N N3^]USVuWEPjYueuRP|L}s:^3*G;rN;rލEPVM|6};uҋM9_^[]ERP|}r39]vVut;O;{P;mMQPUI|}C;]s븸%눐UQQS]VWEPjYuluRP|S}sA^31G;rN;rލA;r׉EEPV<|6};uˋM9_^[ERP|}r39uv4EP@mEPutGO;dP;VJ;KMMQP|}F;up뜸%iUSVuWE];s

PjVE;v
#}t}E8EPjYRPȅvE;Y3ҋ؋EBf3fPxpEE8E;0fGfFG$F3fF
GCFG˃ȉE;MPffF^wSQ]EPE+PSVWȅ?];}낃e}Euut}fGfFG$F3fF
GCFG˃ȉE;MwVPffF^wS]EPE+PSVWXȅ|1]EEE;Esr%	
}}r}3_^[UQEeS]V4u;sEE MAWdtQ$C;Iuy,F7E;t6]NU;UQKvP6E;uЋ]M+É_E^[Q$C;uFY,39N AAU;UVVWQRGv$QPE6;tQ$C;wluy,F7E;UMMNAAU;Uw:UQRvQPW6EE;ɋQ$C;vEuFq,;tYY_	;u]E
UQS]WEPShSeAtju訁ȅu
CVPMfFCF3fF
sFPf8@@fu+<Wf>f~N3QE+ǃEEPEWVS|E03tV!^_[U}S]VWus,>jjWSvW96uC80~G6ujjWSOWÀC8;u_^[]US]VWjS{,7FujjVSF6;uC$_^C([]UQQVu~u
cffEfEFWEEPuu&EPu(FGfFfGg jjWu`VW_^USVW}ffEfEGEEPu3ۉ];tdF u^jSVu9_uN VEPWVn;ÉE|68]tN F t&u"jSVu#SV<VIE%E_^[US]VWjYEPu}e(=%u3|{t	Su_^[UQVW}j3VWuEG VjWutVWEJ
89?t>S7^j]uVutVo~
jjVu9?u[E_^UQS]jjSuEC t ujSE1jSC W{89?tV7jjVSxf9?u^_E[UQUS3W]9u+jZ9Us#M33@f3M}3V;v'Ef9Xt4f9t/fpf;0w&9Xt!A;rߍEPWuRB;|Eu;u
79usE0#&uSuZuuWuuM1^_[USVuWE];s

PjVE;v
#}t}E8EPjYRPȅE;3ҋ؋EBf3fPxp39EE8E;YGPdfFG$F3fFwFG@@C˃ȉE;MHQwPS]EPE+PSVWȅ?];}yE9EEEM4EP@mEPuGPfFG$F3fFwFG@@C˃ȉE;MwSM1HQwPS%]EPE+PSVW!ȅ|1]EEE;EsP%	
}}r}3_^[US]VW{7N jjVSV6;u_^[]US]W{9?t)V7}VSttVZz9?u^_[]UQQEeSE;VW}t
CCP}CjjWuGfCfGUChtYHC,0?v&G(GNOvvPjjWu6C,;뷍C,0QF PFGFGfF fG O G(QG$v$PyjjWu>6C,;륍C,8BGP2tvF3fOffVQV(PVmjjVu?C,;t4븍C,0'jt,NjjHNPWH6C,;uՋ;]tTEE
_^}PuE[UQES3W]9u+jZ9Us#M33@f3M}3V9]v*;t>f9t9pf@@f;u+=w(B;Ur֍EPuWu;|Lu;u
>79usE0#&uSuuuuWutM1^_[UQE8EuEVW}u}u

u3PW|t}tuMS39_v[!]GE}uM3+t+IItItIu1PuPu	Puc|EC;_s뭾
[Pu_^UE8EuESVW}3;u8]u

u3PW;8]tuk]9_]GEMQP(|i}]u EM3+t2HHt#HtHt
!SuSu	Su`Sue|EEE;GrPu_^[UV3W9uv0ME;Puy;xuy;8uy;xtF(;ur2_^]E0񐐐UEMk(W}3҃|9USVk(NjpNuE;Ms<k(>Ek(D8pf;uv;uu0!upP	uA(;Mr׋E]k(4N;u
;^uE;F tlEt0Ht!Hu^F M#N t9jv$uh$F#É^	#Vtjv$uhP
ME3҃~U^[_UQEVWEtsHtEHE}k(4FN #EF ;uEzFjv$uh#YE}k(4F N#EF;t‹F #!E}k(M4F#ȉN;jv$uh#EP-
}}uuuuuW	E@E;Ek(|8fGf;Et_Ht2HO##E#MGGtcjwuhQNGЋ##E#M‰t8jwuhӋOU#E#щWtjwuhPW	EE(;EQ_^UW}v!Vu$u6uuu	(Ou^_]UQM3SW}3҈AAABE:vvVvLt
t,P:w]Epr<uPuAwjqZ;rփ Epj
X;s	E
jAGZy^E_E[UQS]Vu3W}fOfNfOfONE9Gu	E|Ot8Et0hSeGaPFPqFuRwwP_39~uE}t)vFxPmNfyG;rE_^[UE-tRHt;Ht$HuE;E|
QE;EsI23<]E;E|0E;Ew(݋E;E|E;EvɋE;E|E;Es뵐UE-tRHt;Ht$HuE;Er
wQE;EsI23<]E;Erw0E;Ew(݋E;EwrE;EvɋE;EwrE;Es뵐UQQSV3}WuEMIuUQIUVfu:tfut}rw}v!E9Fv>}tVFHtHtF8X;}u;]t#3EM;Nrƅ|I}u3Ƀ73@}t,NItIu"uuSWuuuSWu_^[j(hSmҿ3}E}3}؋];}uE}}MAtuA0@	ApE̋EH9MsM̋x3t҃3;u@9EsvE-t&HtHtH&9393939uf~u,EPEPF$Pu:E;}}9;E;F;t	V	EFt,uQFxE;xuAWpQm;u2*}WF$PvEPmEE3vEE3@ËeE܉EEE;|}u
3Ƀ}t}tulE)SmSmj<hUm賽3ۉ]Љ]Ԉ]]}uEu]̋}EPEPww/E;a}W]EPEPC$PEPE+EPEPG+EPGEPE3;}EM܋HMx}9>|rE;Csj;t	S:ECMЋHMԉ}HM@EWC$PEPEPmEEM;Mu$M;Mut}u<3>Y>EnEE3@ËeE؉EEE)}t#}u>uuuuu릃}tujE={UmUmUdm3ʼnEESVu3W}EF]]E;veMQM+QPFP5}EtE}|>EDrjDXPuEPuEPul Et
]F;rEME_^3[USVu3W}F]];MQM+QPFP}EtE]}|vUJ~W~5tuHfEf;t}u=fu7WEPRhE}t}uEPRh?uF;s[E_^[UMQ3;t=w5Q;~0~t
u!I9AIf9I;t
Qt3@]UM3r	VuW}4_^]UU
3sI
UU
]UdEMSV3WuuuEEu9uU;jY9Ms/:artxu}s
EEuuM9ME}8ú;ˆ]jPdtt8~R~uH}EPEPE+PQTM}̉}EE9EsM<9t;P|Q~~=uEu!jEPPS}tNft}ut~u~~Wtt-ufEf;gEPEPVu}GEPEPVu}'EPVuEE39EEPM=b===9==E}t&uPEEPP#E+E{MUNj<+щM;`PȍEPEP3SEPE}ĉM;PEEEP]]];}%&3EE}tu?eE}E39}tuE}EPEPPp;39}PE39}tuE؉}EPEPP*;EPEPP;fu$9}t9}t}t-}t'E'}"3@9Et9Et}t}uMEuEPPq;EEPuEuP_EPEPP-ekEE}v}lxbMQMQP|Q}DuEPP|QeEE;E}uM*#E}u}tuԾ
}tu#c}E_^[\mQRPhfm{ZY%\mXmݐ%XmTmː%Tm<m빐%<mLm말%LmHm땐%HmPm냐%Pm@mn%@mDmY%DmmQRPhfmZYxmlmḈmڸmӸdm̸hmŸpm뾸tm뷸m밸|m멸m뢸mQRPhfm]ZY%mmQRPhfm:ZYศmQRPhgm"ZY%mmݐ%mU\m3ʼnESVWm؁jCXCs#ejEPumẺEEPme}NF}uKeh`mmuh`mmt)h`mP,mteMQЃu
EvEMGQPuE@|rE!EtEPWu@|W?9EsEO#}+}ujXEM;r-jhuWmtEPVuWmt3@3e_^[M3ÐSetThreadStackGuaranteekernel32.dllkernelbase.dllUud@0jpm]Uud@0jpm]UQm3ʼnEEu!eM3jhamY3FeuE3=Ëe3EaamamĀmQRPh<gmMZY%Āmmݐ%mmː%mm빐%mm말%m%0m%`m%\mV3ʅtf9tFFJuu
^t|+ʉÃ'ÐUW3t;Uv
|
E'_]USVW؋33t!9EtftfAACCNMGuuIIO3fMt9_^[]UUjXtv
|EMhjw]US]VuWWSE|EW+ЍCEj4_^[]U@m3ʼnEES]VuW3EȋEE]̉}Љ}؉;;)ƍPf@@f;u+fu	ef\uf9Fu
u؃OOuL"D?Pjm؉]Ѕu
|j\XffCD?PCVP]؋]̃w7EPEPjEmt;}uWEVPu3u؅tYf|~.uOh
jm؅lEPSjEmt;}uWVSLu!ESm]̋EȍPf@@fu+|WjmhfmWV}Vm
puWV|EPuVuhemjmVmSumEPmt!;t"3}t	umM_^3[]ncacn_np\PIPE\mmmmglhg,hg4hg<hhdhhi@hiPhi`h iRPCRT4.dllAPI-MS-Win-Security-LSALookup-L1-1-0.dllAPI-MS-Win-Security-SDDL-L1-1-0.dllSAMLIB.dllWLDAP32.dllnetutils.dlllogoncli.dlldsrole.dllSspiCli.dll8iNifiiiiiiijj4jNjdj|jjjjjjjM
IO)jkk*kNkdkzkkkI_RpcMapWin32StatusI_RpcExceptionFilterRRpcStringBindingComposeWdRpcBindingFromStringBindingW+RpcStringFreeWRpcSsDestroyClientContextNdrClientCall2RpcBindingCreateWRpcBindingBindRpcBindingFreeLookupAccountSidLocalWSConvertStringSidToSidWSSamGetGroupsForUserSamGetAliasMembershipSamQueryInformationUserSamOpenDomainSamOpenUserSamConnectSamRidToSidSamFreeMemorySamCloseHandleNetApiBufferFreeDsGetDcNameWDsRoleFreeMemoryDsRoleGetPrimaryDomainInformationLsaFreeReturnBufferLsaConnectUntrustedLsaLookupAuthenticationPackageLsaLogonUserLsaDeregisterLogonProcessll4ml<hmlpmplm`l0nTl8ntdll.dllKERNEL32.dllAPI-MS-Win-Security-Base-L1-1-0.dllAPI-MS-Win-Core-ProcessThreads-L1-1-0.dllAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllmsvcrt.dllnnnooo o*o8oFoPoXodopozoooooooo
pp.p>pLp`ptppppppppq*q<qLqdqvqqqqqqrr(r8rFr\rlrzrrrrrrrrsss.s<sJshs|ssssssstt(t6tVtdtztttttttu(u@uXupuuuuuuuvv.vPvnvvvvvvwwY_except_handler4_common_amsg_exit[wcsncmpmemset_wcsicmpi_wtoij_wtoi64_vsnwprintfj_XcptFiltermallocfree_initterm_wcsnicmpmemcpyRegEnumKeyExWRegQueryInfoKeyWRegDeleteKeyExW
RegEnumValueWRegDeleteValueWRegQueryValueExWRegCreateKeyExW%RegSetValueExWRegOpenKeyExARegQueryValueExARegOpenKeyExWRegCloseKey
GetCurrentProcessOpenProcessTokenGetCurrentThreadOpenThreadToken$SetThreadPriority
GetCurrentThreadId*TerminateProcessGetCurrentProcessIdCreateThread:GetTokenInformationCreateWellKnownSid$EqualDomainSid-GetLengthSidAdjustTokenPrivilegesGIsWellKnownSid<LoadLibraryExAQueryPerformanceCounterGetTickCountUnhandledExceptionFilterSetUnhandledExceptionFilterGetComputerNameExWVirtualProtectGetModuleHandleWVirtualQueryGetVersionInterlockedExchangepSetLastErrorRCloseHandleCreateEventWVSetEventWaitForSingleObjectGetLastErrorInterlockedIncrementInterlockedDecrementCLocalAllocGLocalFreeSleepVirtualAllocrGetSystemInfoVirtualFreeResetEventInterlockedCompareExchangeGetComputerNameWxGetSystemTimeAsFileTimeDelayLoadFailureHookDGetProcAddressaFreeLibraryNtQueryValueKeyZNtOpenKeyRtlInitUnicodeStringRtlOwnerAcesPresentRtlCopySidRtlCopyLuidRtlCopyLuidAndAttributesArrayRtlEqualSidRtlSubAuthoritySidRtlSubAuthorityCountSidqRtlGetNtProductTypeNtAllocateLocallyUniqueIdRtlInitStringNtCloseRtlInitializeResourceRtlDeleteResourceCRtlAcquireResourceSharedRtlEqualUnicodeStringRtlCopyUnicodeStringRtlUpcaseUnicodeCharRtlIsNameInExpressionRtlCompareMemoryGRtlFreeHeapcRtlAllocateHeapRtlImageNtHeaderRtlLengthSecurityDescriptorRtlMakeSelfRelativeSDRtlValidSidNtQueryInformationTokenNtQuerySecurityAttributesTokenBRtlAcquireResourceExclusiveTRtlReleaseResource
RtlEnterCriticalSectionRtlLeaveCriticalSectionRtlInitializeCriticalSectionRtlDeleteCriticalSectionRtlLengthSidRtlNtStatusToDosErrorRtlInitializeSidy[J"lwlky[J5~
hwhk~RSDSpC-lFd{authz.pdbumm0fm&fmfmfmtmtmtmtm!m!m]m=^mR^m^m^m+^m]m]m]m^m^m^m^m^m^m^mg^m^m^m^m^m^m^m_m*_mam5bm#bmbmamDN@
mmmmhm		0123456789ABCDEF0	H`4VS_VERSION_INFO@@?StringFileInfo040904B0LCompanyNameMicrosoft CorporationXFileDescriptionAuthorization Frameworkl&FileVersion6.1.7600.16385 (win7_rtm.090713-1255)4
InternalNameauthz.dll.LegalCopyright Microsoft Corporation. All rights reserved.<
OriginalFilenameauthz.dllj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.1.7600.16385DVarFileInfo$Translation	H11222h3p3t3|3333333333333333;; ;$;,;8;d;0l444444444455J5h5646K6R6o6|6777"7&7*7.727E7"8)8889i9o9s9w9{99999$:(:<:A:r:y:P82444445\5w5}5555555W6y7779;u<`N001(1_12	3w333444f6v6666
7H7]7r7v7777777888!828B8G8M8e8j8v888888888$999?9T9Z9p9x9~99999999999:;(;,;0;4;8;<;@;D;H;L;P;;;;;< <=<Y<<<<x===>i???p01<1@1D1H1L1P1T1X1\1`1d1h1"21222$3(3<3A3l3q3333
484T4444444
5_5o5|55556677777B:;;<<@=k==>>i>>>>>>>>>
?X?????l31L2`2i213333
44J44d56666666777 7X7g7r7}777778d888 9-999999,:T:i::;>?*050001111334444455566#6J66677[7777$8a8899&969N99:::;;;M;T;c;;;;;<<<<===>>>>>>>>>>L?Z?d?00J1122G214Z4444455666666X7x7778J8k8v888888k99%::::;!;Z;n<<<<<<=+=I=T===>U>>>>?
?010U0011	2U223 3W34m4445*55556t666666+7K7R7|777;8]8j88888$9499999l;s;{;;;K<<<a=t=?A?]???H000133345;66J7P77889+9W9^99a:;<@<E<<<<<?05679Y99g:m::<	===>>4?O???HG5F6Y78:E::::;B;g;;<(<2<O<<<<<<=D===f>>>>??90M0z00001)1]1}112-363,4<4J446g7778888888899f9p999999:0:T:b:::::);d;<7<<<===>x>?v??f00001%2O22222 3314L4R4`4o4x4458P9999
:::5:<:]:::::::W;;;<$<@<L<T<<<<<<<2=@=Z=====>>>>O?]???????00
0000%0+01080@0H0P0\0e0j0p0z00000000000000011/141E1111222272]2b2222222	334393_3d333334(4/4>4N4V4]445i6s66<7@777%8L8P888999990:::::D;H;P;T;;<h>>????s???? 0D0H0111110A0n0V1122C:@"57?P1X3344475566========>>>>'>,>9>>>N>S>c>h>r>>>>>>>>>>>>>>>>>??&?+?8?J?X?????????`\m00181L1v1111112
222$21262C2N2Y2d23:4444
515@5R5w55555566'616h00000000 0$0,040<0@0D0H0L0P0T0X0\0d0h0l0p0t0x0|00000000000000055 5$505

Anon7 - 2022
AnonSec Team