HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/security/logs/sceupgrade.log
��-------------------------------------------

2024t^12g6�e NHS 10:57:31

		g�|q}�{t�T
kP��vO(u�{veQ0

----R�g_�dR�YSb�R0----


N���R�g��V�p�]�}�[b�N0





----*gR�YSR�g_�d...

-------------------------------------------

2024t^12g6�e NHS 10:57:32

		g�|q}�{t�T
kP��vO(u�{veQ0

	R�g�{,g C:\WINDOWS\inf\dwup-noregkeys.inf0

-----��[_�dR�YSb�R0----



----���S-��[�{,gnj
�...





-----��[O(u�
kP�...

		SeImpersonatePrivilege �_�c>mf}�|q}�{t�T0�P-��[�]��te0

		SeImpersonatePrivilege �_�c>mf} SERVICE0dk-��[�]��te0

	-��[ S-1-5-190

	-��[ S-1-5-200

	-��[ S-1-5-32-5440

	-��[ S-1-5-32-5510

	-��[ S-1-5-32-5590

	-��[ S-1-1-00

	-��[ S-1-5-32-5450

	-��[ S-1-5-60

	-��[ S-1-5-90-00

	-��[ S-1-5-32-5550

	-��[ S-1-5-80-00

	-��[ S-1-5-80-3169285310-278349998-1452333686-3865143136-42122268330

	-��[ S-1-5-80-3139157870-2983391045-3678747466-658725712-18093404200



	O(u�
kP�-��[b�R�[b0





-----��[�D}b�Tnj<h...



	�D}b�Tnj<h-��[b�R�[b0





-----��[ 64 MOCQ{v�_j�x...

	-��[ machine\system\currentcontrolset\services\sysmonlog\log queries0

f�JT 2: �|q}~b
N0Rc�[�v�jHh0

 	R	� machine\system\currentcontrolset\services\sysmonlog\log queries nj
�Bf|vu/���0



	{v�_j�x-��[b�R�[b0





-----��[ 32 MOCQ{v�_j�x...



	{v�_j�x-��[b�R�[b0





-----��[�jHh�[hQ'`...

	-��[ c:\perflogs0

	-��[ c:\program files\common files\speechengines\microsoft\tts0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\program files\common files\speechengines\microsoft\tts �v�[hQ'`Bf|vu/���0

	-��[ c:\programdata\microsoft\windows\drm0

	-��[ c:\windows\repair\default0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\windows\repair\default �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\repair\ntuser.dat0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\windows\repair\ntuser.dat �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\repair\sam0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\windows\repair\sam �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\repair\security0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\windows\repair\security �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\repair\software0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\windows\repair\software �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\repair\system0

f�JT 3: �|q}~b
N0Rc�[�v_0

 	2�L� c:\windows\repair\system �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\system32\wbem\mof0

	-��[ c:\windows\system32\windows media0

f�JT 2: �|q}~b
N0Rc�[�v�jHh0

 	2�L� c:\windows\system32\windows media �v�[hQ'`Bf|vu/���0

	-��[ c:\windows\syswow64\export0

f�JT 2: �|q}~b
N0Rc�[�v�jHh0

 	2�L� c:\windows\syswow64\export �v�[hQ'`Bf|vu/���0



	�jHh�[hQ'`-��[b�R�[b0





----2�L�N,�
g�R-��[<P...

	-��[ sysmonlog0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U sysmonlog Bf|vu/���0

	-��[ SamSs0

	-��[ ntmssvc0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U ntmssvc Bf|vu/���0

	-��[ netddedsdm0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U netddedsdm Bf|vu/���0

	-��[ netdde0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U netdde Bf|vu/���0

	-��[ dmserver0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U dmserver Bf|vu/���0

	-��[ clipsrv0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U clipsrv Bf|vu/���0

	-��[ browser0

/��� 1060: c�[�v
g�R&N
N/f�]�[݈�v
g�R0

 	��_U browser Bf|vu/���0



	N,�
g�R-��[b�R�[b0





-----��[�S(u�vD��N_�d...



	D��N_�d-��[b�R�[b0





-----��[�[hQ'`�SGR...

	-��[�[�xnj
�0

	Administrator 3^6b�]\P(u0

	Guest 3^6b�]\P(u0



	�|q}X[�S-��[b�R�[b0

	LSA ?S
Td\
T1z-��[: �sX[�v SD = D:(D;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17)(A;;0x801;;;AC)(A;;0x801;;;S-1-15-2-2)0

	-��[ LSA ?S
Td\0

	-��[ machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon0

	-��[ machine\system\currentcontrolset\control\lsa\disabledomaincreds0

	-��[ machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous0

	-��[ machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled0

	-��[ machine\system\currentcontrolset\control\lsa\forceguest0

	-��[ machine\system\currentcontrolset\control\lsa\restrictanonymoussam0

	-��[ machine\system\currentcontrolset\control\securepipeservers\winreg\allowedexactpaths\machine0

	-��[ machine\system\currentcontrolset\control\securepipeservers\winreg\allowedpaths\machine0

	-��[ machine\system\currentcontrolset\control\session manager\kernel\obcaseinsensitive0

	-��[ machine\system\currentcontrolset\control\session manager\protectionmode0

	-��[ machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes0

	-��[ machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess0

	-��[ machine\system\currentcontrolset\services\ldap\ldapclientintegrity0

	-��[ machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal0



	{v�<P-��[b�R�[b0

	-��[���j0



	=z8h/���j-��[b�R�[b0





-----��[�S(u�vD��N_�d...



	D��N_�d-��[b�R�[b0





----
NR�YS-��[_�d...