able/windows-nt
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
windows-nt/Source/XPSP1/NT/base/ntos/se/embedded/auditing_{cbd79e8a-8504-443e-a5cc-d0e5d1230aed}.sld
CryptoAlgo Inc b3cac27891 Add source files
2020-09-26 16:20:57 +08:00

5314 lines
371 KiB
Scheme
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version="1.0" encoding="UTF-16"?>
<!DOCTYPE DCARRIER SYSTEM "Mantis.DTD">
<DCARRIER
CarrierRevision="1"
DTDRevision="16"
>
<TASKS
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </TASKS>
<PLATFORMS
Context="1"
> </PLATFORMS>
<REPOSITORIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </REPOSITORIES>
<GROUPS
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </GROUPS>
<COMPONENTS
Context="0"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<COMPONENT
ComponentVSGUID="{1D1AF45D-AA2E-48C7-8A76-D401F1AA86AB}"
ComponentVIGUID="{57451AE9-CEED-424C-938D-ADED2EBD8F24}"
Revision="620"
RepositoryVSGUID="{8E0BE9ED-7649-47F3-810B-232D36C430B4}"
Visibility="1000"
MultiInstance="False"
Released="False"
Editable="True"
HTMLFinal="False"
IsMacro="False"
Opaque="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </PROPERTIES>
<RESOURCES
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;NETAPI32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NETAPI32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;MSVCRT.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MSVCRT.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;ntdll.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ntdll.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;cryptdll.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>cryptdll.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;RPCRT4.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RPCRT4.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;KERNEL32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>KERNEL32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;Secur32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Secur32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;USER32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>USER32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;ADVAPI32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ADVAPI32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;SAMSRV.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAMSRV.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;MSASN1.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MSASN1.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;SAMLIB.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAMLIB.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;MPR.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MPR.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;NTDSA.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NTDSA.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;DNSAPI.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DNSAPI.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;NTDSETUP.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NTDSETUP.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;CRYPT32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CRYPT32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;CRYPTUI.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CRYPTUI.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;USERENV.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>USERENV.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;certcli.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>certcli.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="File(819):&quot;%11%&quot;,&quot;msaudite.dll&quot;"
ResTypeVSGUID="{E66B49F6-4A35-4246-87E8-5C1A468315B5}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="DstPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%11%</PROPERTY>
<PROPERTY
Name="DstName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>msaudite.dll</PROPERTY>
<PROPERTY
Name="NoExpand"
Format="Boolean"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>False</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;HAL.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HAL.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;BOOTVID.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>BOOTVID.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;KDCOM.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>KDCOM.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="File(819):&quot;%11%&quot;,&quot;msobjs.dll&quot;"
ResTypeVSGUID="{E66B49F6-4A35-4246-87E8-5C1A468315B5}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="DstPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%11%</PROPERTY>
<PROPERTY
Name="DstName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>msobjs.dll</PROPERTY>
<PROPERTY
Name="NoExpand"
Format="Boolean"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>False</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;WS2_32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>WS2_32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;ole32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ole32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA&quot;,&quot;CrashOnAuditFail&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CrashOnAuditFail</PROPERTY>
<PROPERTY
Name="RegValue"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>0</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA&quot;,&quot;auditbaseobjects&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>auditbaseobjects</PROPERTY>
<PROPERTY
Name="RegValue"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>0</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA&quot;,&quot;fullprivilegeauditing&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>fullprivilegeauditing</PROPERTY>
<PROPERTY
Name="RegValue"
Format="Binary"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>00</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>3</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;DisplayNameFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DisplayNameFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\system32\els.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;DisplayNameID&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DisplayNameID</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>257</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;File&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>File</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\config\SecEvent.Evt</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;MaxSize&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MaxSize</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5046272</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;PrimaryModule&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>PrimaryModule</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;Retention&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Retention</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>0</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;Security&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Security</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>01001480A8000000B4000000140000003000000002001C000100000002801400FF010F000101000000000001000000000200780005000000000014008D01020001010000000000050B000000000018009D0102000102000000000005200000002302000000001800FF010F000102000000000005200000002002000000001800FF010F000102000000000005200000002502000000001400FD010200010100000000000512000000010100000000000512000000010100000000000512000000</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>3</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;Sources&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Sources</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>01001480A8000000B4000000140000003000000002001C000100000002801400FF010F000101000000000001000000000200780005000000000014008D01020001010000000000050B000000000018009D0102000102000000000005200000002302000000001800FF010F000102000000000005200000002002000000001800FF010F000102000000000005200000002502000000001400FD010200010100000000000512000000010100000000000512000000010100000000000512000000Spooler
Security Account Manager
SC Manager
NetDDE Object
LSA
DS
Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames&quot;,&quot;Directory Service Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Directory Service Object</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7680</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;PolicyObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>PolicyObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5632</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;SecretObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SecretObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5648</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;TrustedDomainObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>TrustedDomainObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5664</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;UserAccountObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>UserAccountObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5680</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames&quot;,&quot;DDE Share&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DDE Share</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7424</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames&quot;,&quot;SC_MANAGER Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SC_MANAGER Object</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7168</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames&quot;,&quot;SERVICE Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SERVICE Object</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7184</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;CategoryCount&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CategoryCount</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>9</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;CategoryMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CategoryMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsAuditE.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;EventMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>EventMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsAuditE.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;GuidMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>GuidMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\NtMarta.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;TypesSupported&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>TypesSupported</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>28</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Channel&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Channel</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5120</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Desktop&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Desktop</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6672</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Device&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Device</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4352</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Directory&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Directory</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4368</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Event&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Event</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4384</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;EventPair&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>EventPair</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4400</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;File&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>File</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4416</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;IoCompletion&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>IoCompletion</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4864</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Job&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Job</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5136</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Key&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Key</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4432</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;MailSlot&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MailSlot</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4416</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Mutant&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Mutant</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4448</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;NamedPipe&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NamedPipe</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4416</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Port&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Port</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4464</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Process&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Process</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4480</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Profile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Profile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4496</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Section&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Section</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4512</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Semaphore&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Semaphore</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4528</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;SymbolicLink&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SymbolicLink</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4544</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Thread&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Thread</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4560</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Timer&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Timer</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4576</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Token&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Token</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4592</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Type&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Type</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4608</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;WaitablePort&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>WaitablePort</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4464</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;WindowStation&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>WindowStation</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6656</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_ALIAS&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_ALIAS</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5424</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_DOMAIN&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_DOMAIN</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5392</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_GROUP&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_GROUP</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5408</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_SERVER&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_SERVER</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5376</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_USER&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_USER</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5440</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;,&quot;Document&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Document</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6944</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;,&quot;Printer&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Printer</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6928</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;,&quot;Server&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Server</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6912</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
</RESOURCES>
<GROUPMEMBERS
>
<GROUPMEMBER
GroupVSGUID="{E01B4103-3883-4FE8-992F-10566E7B796C}"
></GROUPMEMBER>
<GROUPMEMBER
GroupVSGUID="{D7523171-4196-45C3-BA4A-46ECD881D49B}"
></GROUPMEMBER>
</GROUPMEMBERS>
<DEPENDENCIES
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<DEPENDENCY
Class="Include"
Type="All"
DependOnGUID="{7AF53B2D-CD38-4C6F-A40F-066874548AA6}"
MinRevision="0"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </PROPERTIES>
</DEPENDENCY>
</DEPENDENCIES>
<DISPLAYNAME>Auditing</DISPLAYNAME>
<VERSION>1.0</VERSION>
<DESCRIPTION>Kernel Auditing</DESCRIPTION>
<COPYRIGHT>2000 Microsoft Corp.</COPYRIGHT>
<VENDOR>Microsoft Corp.</VENDOR>
<OWNERS>robertre;kumarp;jhamblin;maxa</OWNERS>
<AUTHORS>robertre</AUTHORS>
<DATECREATED>8/23/2000</DATECREATED>
<DATEREVISED>8/23/2000</DATEREVISED>
</COMPONENT>
</COMPONENTS>
<RESTYPES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </RESTYPES>
</DCARRIER>
Reference in a new issue View git blame Copy permalink