HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/msobjs.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!�

��2@ �8.rdata�@@.rsrc� �@@<�u
T88<�u$��8.rdata8x.rdata$zzzdbg �.rsrc$01� �.rsrc$02 �O:o�Q(-��oф���va���]�d<�u��(�@�X�p��������� ���!Ȍ�h���MUI����)U�m"5}u��tǾ�<"�d����`7)Rx������MUIzh-TW>�AApCX�)8	09�
@@`P[�pr��� ���?X		��	�	l!�	�	�!�	�	("�	�	�"�	�	#�	�	T#/d%@�-�IP0POLU<cO�d	p�p�q�q$$r r�r	�s�t�v���w���w 8 �xP X `~!!00$�11��2
2ȁ33�44d�55��66��77<�88��99�99�99|� 9 9ԇ0929�P9Y9D�`9`9X�@@�� @ @��B	B�0*g�[��vX[�S (�l	g\O(u) MOCQ 7

*gO(u�v
�o`X�%R�x

DELETE

$READ_CONTROL

WRITE_DAC

 WRITE_OWNER

 SYNCHRONIZE

(ACCESS_SYS_SEC

 MAX_ALLOWED

$
Nf�vc�[X[�S (MOCQ0)

$
Nf�vc�[X[�S (MOCQ1)

$
Nf�vc�[X[�S (MOCQ2)

$
Nf�vc�[X[�S (MOCQ3)

$
Nf�vc�[X[�S (MOCQ4)

$
Nf�vc�[X[�S (MOCQ5)

$
Nf�vc�[X[�S (MOCQ6)

$
Nf�vc�[X[�S (MOCQ7)

$
Nf�vc�[X[�S (MOCQ8)

$
Nf�vc�[X[�S (MOCQ9)

(
Nf�vc�[X[�S (MOCQ10)

(
Nf�vc�[X[�S (MOCQ11)

(
Nf�vc�[X[�S (MOCQ12)

(
Nf�vc�[X[�S (MOCQ13)

(
Nf�vc�[X[�S (MOCQ14)

(
Nf�vc�[X[�S (MOCQ15)

*gO(u

 c>m;N��
kVgyr�k
kP�

���[��aԚyr�k
kP�

 �X�R��aԚM�M�yr�k
kP�

 *g�}��Bl�v8�eQyr�k
kP�

$�S�O�N�v��f��v�W,gyr�k
kP�

�[hQ'`yr�k
kP�

 �S�_�d	g
k�vyr�k
kP�

(	�eQ/�d�	�eQE��Rz_yr�k
kP�

�v���|q}yr�k
kP�

 -��[�|q}Bf��yr�k
kP�

$�v���UNU�tz�^yr�k
kP�

 �X7_�W,g*QHQyr�k
kP�

�^�zR��jyr�k
kP�

 �^�z8lENir�Nyr�k
kP�

�P�Nyr�k
kP�

 �_�P�N���S�vyr�k
kP�

ܕ_j�|q}yr�k
kP�

uP/�yr�k
kP�

(�j��b���f=z8h���jyr�k
kP�

 ���flxԚ�t�Xyr�k
kP�

(���f��w (�ShTJ�) yr�k
kP�

 `��z�|q}ܕ_jyr�k
kP�

(<xe<P�]9e���FO/f�l	go�:y>

<xe<P*g-��[>

<8l
N>

�]_U(u

�]\P(u

hQ�

!q

,=z8h�SGR�gb�/-��[ API �d\O

,<
N/e�c���f=z8hdk{v�^��W�v<P>

�c��

�bU}�

 ���[te'`�SGR�j�g�bU}

1u�d	g
k�c�

*g�c�

(1u NULL DACL �c�

 ��zz�v DACL �bU}

(1u NULL �[hQ'`�c�CQ�c�


Nfb*g8h�S

1u�ez�1Y�*g�c�

(1u
Nd\nj�e>Y-N�v ACE �c�

(��
Nd\nj�e>Y-N�v ACE �bU}

 1uƖ-NX[�S��GR�c� 

 ^�1uƖ-NX[�S��GR�c� 

(1u6rnj�e>Y�vƖ-NX[�S��GR�c� 

,^�1u6rnj�e>Y�vƖ-NX[�S��GR�c� 


Nf^��W

W[2N

$*g=|r�v 64 MOCQtexe

64 MOCQtexe

FQBN

BLOB

SID

^�g<P

True

False

!qHe

 ACE *Yw��!q�lo�:y

$�[hQ'`�c�CQ*Yw��!q�lo�:y

,*g�c� AppContainers

...

X�%R�x

!j�d

�Y>m

(m�z�^�O�Njd| ACE �bU}

/f

&T

�|q}

!q�lO(u

�-�<P

,DisallowMmConfig

ܕ��

��R

$m�X[�S�{x�hV Ace �bU}

REG_NONE

REG_SZ

$REG_EXPAND_SZ

 REG_BINARY

REG_DWORD

4REG_DWORD_BIG_ENDIAN

REG_LINK

�REG_MULTI_SZ (New lines are replaced with *. A * is replaced with **)

,REG_RESOURCE_LIST

DREG_FULL_RESOURCE_DESCRIPTOR

HREG_RESOURCE_REQUIREMENTS_LIST

REG_QWORD

�e�v{v�<P�]�^�z

�s	g�v{v�<P�]�O9e

{v�<P�]*Rd�

fg�e

fgN

fg�N

fg	N

fg�V

fg�N

fgmQ

DTokenElevationTypeDefault (1)

@TokenElevationTypeFull (2)

DTokenElevationTypeLimited (3)

3^6b�]_U(u

$'��Bl;N�v�' - \P(u

$'
N��Bl�[�x' - \P(u

$'�fBf͑�3^6b' - \P(u

 'N,�3^6b' - \P(u

('MNS {veQ3^6b' - \P(u

('�}�W���O�N3^6b' - \P(u

('�]\O�z�O�N3^6b' - \P(u

(':O
ghV�O�N3^6b' - \P(u

$'�[�x
Ng0Rg' - \P(u

3^6b�d����[

,'AQ1��R�[�v�eW[�[�x' - \P(u

$'��BlzfgaaS' - \P(u

$'�S�O�N�Y>m' - \P(u

 '\*g�Y>m' - \P(u

,'�PO(u DES _j�x' - \P(u

('
N��Bl�NHQW�I�' - \P(u

 '�[�x0Rg' - \P(u

('�S�O�NW�I��Y>m' - \P(u

$'�cd��c
knj
�' - \P(u

T'*g�[��v UserAccountControl MOCQ 20' - \P(u

L'O(u AES ёp��Ow� Kerberos 
g�RhyI�' - \P(u

T'*g�[��v UserAccountControl MOCQ 22' - \P(u

T'*g�[��v UserAccountControl MOCQ 23' - \P(u

T'*g�[��v UserAccountControl MOCQ 24' - \P(u

T'*g�[��v UserAccountControl MOCQ 25' - \P(u

T'*g�[��v UserAccountControl MOCQ 26' - \P(u

T'*g�[��v UserAccountControl MOCQ 27' - \P(u

T'*g�[��v UserAccountControl MOCQ 28' - \P(u

T'*g�[��v UserAccountControl MOCQ 29' - \P(u

T'*g�[��v UserAccountControl MOCQ 30' - \P(u

T'*g�[��v UserAccountControl MOCQ 31' - \P(u

3^6b�]\P(u

$'��Bl;N�v�' - _U(u

$'
N��Bl�[�x' - _U(u

$'�fBf͑�3^6b' - _U(u

 'N,�3^6b' - _U(u

('MNS {veQ3^6b' - _U(u

('�}�W���O�N3^6b' - _U(u

('�]\O�z�O�N3^6b' - _U(u

(':O
ghV�O�N3^6b' - _U(u

$'�[�x
Ng0Rg' - _U(u

3^6b���[

,'AQ1��R�[�v�eW[�[�x' - _U(u

$'��BlzfgaaS' - _U(u

$'�S�O�N�Y>m' - _U(u

 '\*g�Y>m' - _U(u

,'�PO(u DES _j�x' - _U(u

('
N��Bl�NHQW�I�' - _U(u

 '�[�x0Rg' - _U(u

('�S�O�NW�I��Y>m' - _U(u

$'�cd��c
knj
�' - _U(u

T'*g�[��v UserAccountControl MOCQ 20' - _U(u

L'O(u AES ёp��Ow� Kerberos 
g�RhyI�' - _U(u

T'*g�[��v UserAccountControl MOCQ 22' - _U(u

T'*g�[��v UserAccountControl MOCQ 23' - _U(u

T'*g�[��v UserAccountControl MOCQ 24' - _U(u

T'*g�[��v UserAccountControl MOCQ 25' - _U(u

T'*g�[��v UserAccountControl MOCQ 26' - _U(u

T'*g�[��v UserAccountControl MOCQ 27' - _U(u

T'*g�[��v UserAccountControl MOCQ 28' - _U(u

T'*g�[��v UserAccountControl MOCQ 29' - _U(u

T'*g�[��v UserAccountControl MOCQ 30' - _U(u

T'*g�[��v UserAccountControl MOCQ 31' - _U(u

{veQBf|vu/���0

$c�[�vO(u�3^6b�]0Rg0

,NetLogon CQ�N
N(WO(u-N0

3^6b�]���[0

4*g\��S_jhV
N��Bl�v{veQ^��W�c�O(u�0

$c�[�v3^6b�[�x�]�}0Rg0

3^6b�vMR\P(u0

U��S3^6b{veQBfP�0

$
NAQ1�O(u�{veQ��S��f�0

(
Nf�vO(u�
T1zb/����[�x0

 �}�W SID 
NN�0

,���zfgaaS{veQ�FO/f�l	g���ZP0

!q�lO(u0

 ��_jxeW["uuhV1YWe0

D"uu��_jxeW[Bf�!q�l2�L� FIPS-140 �HQܖJn�j�g0

 !q�l\�[�xnj�exk��0

$ёp�!q�l�k
\N�'`�j�g0

,!q�l�d��Ow�8lEN'`�v�[�x�}o�ёp�0

ёp�/S�Q�j�g1YWe0

�x��lQ��ёp�1YWe0

=|�zW�I�1YWe0

��_Uёp��jHh0

*Rd�ёp��jHh0

 �_�jHh���S�_��ёp�0

 \�_��ёp��[eQ�jHh-N0

 /S�Q�_���[�x�}o�ёp�0

 /SeQ�_���[�x�}o�ёp�0

��_Uёp�0

�^�zёp�0

*Rd�ёp�0

�R�[0

��[0

&{_�ܖJn0

�[�xTSp�0

�}�W-��[

(local settings

�e�X�c�O�0

�yd��c�O�0

�e�XgQ�[0

�yd�gQ�[0

�e�X�Qxe0

�yd��Qxe0

�e�X�Qxe�c�O�0

�yd��Qxe�c�O�0

�e�X�QxegQ�[0

�yd��QxegQ�[0

��f�ёp�0

O(u�ёp�0

ёp�M�u0

�[JT�^�z0

�[JTW�I�0

݈nX[�SMOCQ 0

݈nX[�SMOCQ 1

݈nX[�SMOCQ 2

݈nX[�SMOCQ 3

݈nX[�SMOCQ 4

݈nX[�SMOCQ 5

݈nX[�SMOCQ 6

݈nX[�SMOCQ 7

݈nX[�SMOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb��v�

hTJ�

(W�v�-N�^�zir�N

�^�zP[�v�

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb��N�N�rKa

�O9e�N�N�rKa

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

@ReadData (b ListDirectory)

4WriteData (b AddFile)

pAppendData (b AddSubdirectory b CreatePipeInstance)

ReadEA

WriteEA

�WL�/hTJ�

 DeleteChild

(ReadAttributes

(WriteAttributes

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb�_j�x<P

-��[_j�x<P

�^�zP[_j�x

R	�P[_j�x

��w_j�x���f

�^�z#�P}

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

H_U(u 64 (b 32) MOCQ�a(uz_�O��_U 64 MOCQ_j�x

H_U(u 64 (b 32) MOCQ�a(uz_�O��_U 32 MOCQ_j�x

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

$�gb� mutant �rKa

0*g�[��vX[�S (�l	g\O(u) MOCQ 1

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�
�O(u#��c�W

0*g�[��vX[�S (�l	g\O(u) MOCQ 1

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

7_6RU�tz�^B}bk

 (WU�tz�^�^�z�e�WL��}

$-��[U�tz�^�]\O���kX�%R�x

�WL�[��d��aԚ�d\O

 �_U�tz�^���S��aԚ

 \��aԚ�[eQU�tz�^

$͑��v�c6R�N�x2��QU�tz�^

$�^�zNPU�tz�^�vP[U�t

-��[U�tz�^M�M�

-��[U�tz�^nj
�

�gb�U�tz�^nj
�

 -��[U�tz�^B}bk#��c�W

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�c6R-��[�j

0*g�[��vX[�S (�l	g\O(u) MOCQ 1

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb�@S�k�rKa

�[eQ�v
\�a@S�k

���S�v
\�a@S�k

�WL��v
\�a@S�k

�dEQ'Y\

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb��O_��rKa

�O9e�O_��rKa

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

O(u&{_�#�P}

0*g�[��vX[�S (�l	g\O(u) MOCQ 1

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

7_6R�WL��}B}bk

�f\Pbb`�_�WL��}

�P�f�
�f}�WL��}

�S�_�WL��}gQ�[

-��[�WL��}gQ�[

-��[�WL��}nj
�

�gb��WL��}nj
�

 \NP
kVgc>mf}�WL��}

(\�WL��}�v�c!j�d�SNP�WL��}

�v�c!j�d�P�WL��}

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb��BfhV�rKa

�O9e�BfhV�rKa

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

(AssignAsPrimary

Duplicate

 Impersonate

Query

 QuerySource

,AdjustPrivileges

$AdjustGroups

,AdjustDefaultDacl

(AdjustSessionID

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�^�zir�N^��W�O�

0*g�[��vX[�S (�l	g\O(u) MOCQ 1

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb��rKa

�O9e�rKa

�S����S
�o`

�S��[eQ
�o`

�S��gb�nj
�

�S�-��[nj
�

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

c>mU�tz�^

-��[l\'`

�gb�l\'`

B}bk�]\O

-��[�[hQ'`l\'`

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

(ConnectToServer

(ShutdownServer

,InitializeServer

$CreateDomain

,EnumerateDomains

$LookupDomain

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

8ReadPasswordParameters

8WritePasswordParameters

0ReadOtherParameters

4WriteOtherParameters

 CreateUser

,CreateGlobalGroup

,CreateLocalGroup

8GetLocalGroupMembership

$ListAccounts

LookupIDs

,AdministerServer

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

(ReadInformation

$WriteAccount

AddMember

$RemoveMember

 ListMembers

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

AddMember

$RemoveMember

 ListMembers

(ReadInformation

$WriteAccount

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

8ReadGeneralInformation

(ReadPreferences

,WritePreferences

ReadLogon

 ReadAccount

$WriteAccount

8ChangePassword (��	g
��[�x)

0SetPassword (
N�
��[�x)

 ListGroups

0ReadGroupMembership

4ChangeGroupMembership

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�j��^�_j�[�SGRnj
�

�j���|q}=z8h�Bl

�S�__j�[�SGRnj
�

�O9e�}�W�O�Nܕ�O

0�^�zyr�k3^6b (�p�Nc>mO(u�
kP�)

�^�z�y�[ir�N

�^�zyr�k
kP�

-��[�-�M�M�P�6R

���f�|q}=z8h�Bl

$�|q}�{t�T=z8h���jl\'`

_U(u/\P(u LSA

d\
T1z/SIDs

���f�y�[<P

�gb��y�[<P

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

(�gb��S�O�N�v�}�W
T1z/SID

$�b�S�S�O�N�}�W-N�v�c6R�z

$���f�S�O�N�}�W-N�v�c6R�z

8�gb�c>mf}�S�O�N�}�W�v Posix X�%R�xMO�y

8���fc>mf}�S�O�N�}�W�v Posix X�%R�xMO�y

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

�gb�3^6bnj
�

 ���f
kP��]c>mf}3^6b

 ���fM�M��]c>mf}3^6b

$���f{veQ�R���]c>mf}3^6b

8���fc>mf}�S=z8h�}�W�v Posix X�%R�xMO�y

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

$KeyedEvent I{�_

$KeyedEvent �U��

0*g�[��vX[�S (�l	g\O(u) MOCQ 2

0*g�[��vX[�S (�l	g\O(u) MOCQ 3

0*g�[��vX[�S (�l	g\O(u) MOCQ 4

0*g�[��vX[�S (�l	g\O(u) MOCQ 5

0*g�[��vX[�S (�l	g\O(u) MOCQ 6

0*g�[��vX[�S (�l	g\O(u) MOCQ 7

0*g�[��vX[�S (�l	g\O(u) MOCQ 8

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

R	�Lhb�

���Sl\'`

X[�SjR��?|

�^�zLhb�

�[eQl\'`

X[�S�(uCQ }

P}_g���z

*gO(u�vX[�S�ej

 (WR	�-NS+T�P���z�z

���S��U^

���Sir�N

�^�z���z

�^�z�R��h�

�Rޞ�c6R

�e�� (��)

�e�� (�d>e)

 (WR	�-NS+T�PLhb�

�[eQir�N

R�c0R�PLhb�

 �|q}�{t�TRpS:O
ghV

R	�pSh�_j

�[hQ�c6R

RpS

�|q}�{t�T�e�N

#��}0R
g�R�c6RhV

�^�zNP�e
g�R

R	�
g�R

(���[
g�Rnj�e�^�N2�L�hsTO_X[�S

 �gb�
g�Rnj�e�^���[�rKa

(-��[
g�Rnj�e�^�vg�_ck�x�rKa

�gb�
g�R-��[nj
�

-��[
g�R-��[nj
�

�gb�
g�R�rKa

R	�
g�R�OX[

_U�R
g�R

\Pbk
g�R

�f\Pb|~�~
g�R

�_
g�R�gb�nj
�

 |v�Q
g�Rc�[�c6R}T�N

DDE qQ(u���S

DDE qQ(u�[eQ

 DDE qQ(uR�Y\�Ka

 DDE qQ(uR�Y#�P}

DDE qQ(u��Bl

DDE qQ(u�JT

DDE qQ(u�gb�

DDE qQ(u�WL�

 DDE qQ(u�e�X��v

 DDE qQ(un�U��v

�^�zP[�|

*Rd�P[�|

n�UgQ�[

�[eQ��]

���Sl\'`

�[eQl\'`

*Rd�9j�r�v�

R�Qir�N

�c6RX[�S

0*g�[��vX[�S (�l	g\O(u) MOCQ 9

0*g�[��vX[�S (�l	g\O(u) MOCQ 10

0*g�[��vX[�S (�l	g\O(u) MOCQ 11

0*g�[��vX[�S (�l	g\O(u) MOCQ 12

0*g�[��vX[�S (�l	g\O(u) MOCQ 13

0*g�[��vX[�S (�l	g\O(u) MOCQ 14

0*g�[��vX[�S (�l	g\O(u) MOCQ 15

=z8h-��[�|q}�SGR

=z8h�gb��|q}�SGR

 =z8h-��[�kNO(u��SGR

 =z8h�gb��kNO(u��SGR

=z8hR	�O(u�

=z8h-��[x��

=z8h�gb�x��

 #��c�WqQ(u (���S)

 #��c�WqQ(u (�[eQ)

�-���I�

��I��{t�T

�e��I�

���S��I�

R	���I�

���S�}�W��I�

\~bgsO��I�

�N�
kVg�cޞ���S

Kerberos

�HQqQ(uёp�


Nf�vW�I�

DES

3DES

MD5

SHA1

,g_j��f�

`��z��f�

!q�rKa

(�]�P�,{NP (SA) gQ�[

(�]�P�,{�NP (KE) gQ�[

(�]�P�,{	NP (ID) gQ�[

_U�RhV

�V�az_

!q�rKa

(�]�P�,{NP (SA) gQ�[

�]�P�g�_NPgQ�[

�[te�[݈


Nf

�P8�

�S�

8IKE/AuthIP DoS 2�bk!j_�]_U�R

8IKE/AuthIP DoS 2�bk!j_�]\Pbk

�]_U(u

*g_U(u

!q�rKa

0�]�P�,{NP (�^8O!j_l\'`) ݈	�

,�]�P�,{�NP (SSPI) gQ�[

(�]�P�,{	NP (ܖJn) gQ�[

IKEv1

AuthIP

?S
T

NTLM V2

CGA

�aI�

SSL

!q

DH �D} 1

DH �D} 2

DH �D} 14

$DH �D} ECP 256

$DH �D} ECP 384

AES-128

AES-192

AES-256

$�aI� ECDSA P256

$�aI� ECDSA P384

(SSL ECDSA P256

(SSL ECDSA P384

SHA 256

SHA 384

IkeV2

 �]�P� EAP ݈	�

�]�P�W�I�݈	�

EAP

DH �D} 24

�|q}

{veQ/{v�Q

ir�NX[�S

yr�k
kP�O(u

s�0}��d�

�SGR���f

3^6b�{t

DS X[�S

3^6b{veQ

�yd�b�R

�e�Xb�R

�yd�1YWe

�e�X1YWe

TuO�yd�b�R

TuO�e�Xb�R

�cd��yd�b�R

�cd��e�Xb�R

TuO�yd�1YWe

TuO�e�X1YWe

�cd��yd�1YWe

�cd��e�X1YWe

�[hQ'`�rKa���f

�[hQ'`�|q}�^8O

�|q}�[te'`

$IPSEC driver

vQ�N�|q}�N�N

{veQ

{v�Q

3^6b���[

 IPsec ;N��!j_

yr�k{veQ

 IPsec �_�!j_

 IPsec �^8O!j_

vQ�N{veQ/{v�Q�N�N

�}SGR:O
ghV

O(u�/݈n�[JT

�D}b�Tnj<h

X[�S
kP�

�jHh�|q}

registry

8h�_ir�N

SAM

vQ�Nir�NX[�S�N�N

�aI�
g�R

"uu�v�a(uz_

�c6R�N�x�d1~

�jHhqQ(u

�{x�s^�S\SN�h

�{x�s^�S#��}

s�0}�jHhqQ(u

�b�S_X[>e݈n

Ɩ-N�SGR�fX[

_j�[yr�k
kP�O(u

^�_j�[yr�k
kP�O(u

 vQ�Nyr�k
kP�O(u�N�N

�^�zU�tz�^

B}bkU�tz�^

DPAPI ;m�R

RPC �N�N

���csS(u�N�N


kVg
kP���te�N�N

=z8h�SGR���f

W�I��SGR���f

�c
k�SGR���f

(MPSSVC ��GRd\}�SGR���f

�{x�s^�S�SGR���f

vQ�N�SGR���f�N�N

O(u�3^6b�{t

��f�3^6b�{t

�[hQ'`�D}�{t

|vHO�D}�{t

�a(uz_�D}�{t

vQ�N3^6b�{t�N�N

�v�
g�RX[�S

�v�
g�R���f

�v�
g�R��[

s�0}�v�
g�R��[

��I�W�I�

(Kerberos 
g�RhyI��d\O

vQ�N3^6b{veQ�N�N

$Kerberos W�I�
g�R

8�eQ

8��Q

NN�

ٖT

IP \S

�P8�

NN�

nj�eAm

nj�eSnj�e

ICMP /���

MAC 802.3

MAC �Su

vSwitch

nj�nc>m

�c}�

�c6e/�c�S

Connect

�^�z�vAmz

nj�nˑ>e

�zޞܕ��

#��}͑�e\T

k~P}͑�e\T

nj�eAm\S

ICMP �V�a��Bl

 vSwitch eQ�S

 vSwitch �Q�S

<�N2�MO>

[NULL]

�e�X�v<P

*Rd��v<P

4Active Directory �}�W
g�R

<Active Directory �ϑ�W�v�
g�R

/f

&T

�]�e�X0RgBf���v<P

�]*Rd�0RgBf���v<P

(�]��R*Rd�<P (+T0RgBf��)

�e�X

*Rd�

��_jBf��

c�~


Nc�~

\��

1��S

W���eW[

MD5

SHA-1

SHA-256

 AES-GCM 128

 AES-GCM 192

 AES-GCM 256

DES

3DES

AES-128

AES-192

AES-256

�P8�

�S�

�V�az_

_U�RhV

$AES-GMAC 128

$AES-GMAC 192

$AES-GMAC 256

(AuthNoEncap �P8�

_U(u WMI 3^6b

�WL��e�l

hQ��[eQ

�R�[eQ

�c�O��[eQ

`��zX[�S

���

|vHO

 AES-GSM-128

 AES-GSM-256

�4VS_VERSION_INFO��
aJ
aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft Corporation:	FileDescription�|q}ir�N=z8h
T1zn'FileVersion10.0.19041.5915 (WinBuild.160101.0800)6InternalNamemsobjs.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.FOriginalFilenamemsobjs.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.5915DVarFileInfo$Translation�PADDINGXXPADDINGPADD