Files
windows_tools/static/PeStudio/translations.xml

1397 lines
96 KiB
XML
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<xml version="1.0" encoding="utf-8">
<!--
This file is part of the pestudio solution (www.winitor.com)
It contains Text that are shown at the User Interface.-->
<settings>
<setting>
<!--
1: Enable the usage of translations
0: Disable the usage of translations
-->
<enable>1</enable>
</setting>
</settings>
<translations>
<translation name="ImageBase" id="0">The preferred address of the first byte of the image when loaded into memory</translation>
<translation name="MajorOperatingSystemVersion" id="1">The major version number of the required operating system</translation>
<translation name="MinorOperatingSystemVersion" id="2">The minor version number of the required operating system</translation>
<translation name="MajorImageVersion" id="3">The major version number of the image</translation>
<translation name="MinorImageVersion" id="4">The minor version number of the image</translation>
<translation name="MajorSubsystemVersion" id="5">The major version number of the subsystem</translation>
<translation name="MinorSubsystemVersion" id="6">The minor version number of the subsystem</translation>
<translation name="ChecksumValid" id="7">Checksum valid</translation>
<translation name="ChecksumInvalid" id="8">Checksum Invalid</translation>
<translation name="Aslr" id="9">Address Space Layout Randomization (ASLR)</translation>
<translation name="CodeIntegrity" id="10">Code Integrity</translation>
<translation name="Dep" id="11">Data Execution Prevention (DEP)</translation>
<translation name="ImageIsolation" id="12">Image Isolation</translation>
<translation name="Seh" id="13">Structured Exception Handling (SEH)</translation>
<translation name="ImageBound" id="14">Image Bound</translation>
<translation name="Wdm" id="15">Windows Driver Model (WDM)</translation>
<translation name="TerminalServer" id="16">Terminal Server aware</translation>
<translation name="Filter" id="17">Hide the Image(s) that match following creteria...</translation>
<translation name="Filter_NonPe" id="18">Non-Portable Executable</translation>
<translation name="Filter_Certificate" id="19">Certificate exist</translation>
<translation name="Filter_Tls" id="20">Threal Local Storage (TLS) usage</translation>
<translation name="Filter_Exceptions" id="21">Exceptions Handler usage</translation>
<translation name="Filter_EmptyVirusTotal" id="22">Empty VirusTotal score</translation>
<translation name="Filter_32bit" id="23">32 bit Images</translation>
<translation name="Filter_64bit" id="24">64 bit Images</translation>
<translation name="ImagesToAnalyze" id="25">Select a file to analyze</translation>
<translation name="ImagesToAnalyzeTypes" id="26">Exe files (*.exe)|*.exe|Dll files (*.dll)|*.dll|Sys files (*.sys)|*.sys|All Files (*.*)|*.*||</translation>
<translation name="ImagesToAnalyzeTypes" id="27">lookup failed</translation>
<translation name="ImagesLoaded" id="28">Images (%i of %i)</translation>
<translation name="ImageIsNotPe" id="29">The Image is not Portable Executable</translation>
<translation name="TrustInfoHighest" id="30">highest</translation>
<translation name="TrustInfoAdministrator" id="31">administrator</translation>
<translation name="TrustInfoInvoker" id="32">invoker</translation>
<translation name="TrustInfoMissing" id="33">missing Trust Info</translation>
<!-- VirusTotal -->
<translation name="VirusTotalScores" id="34">Virustotal</translation>
<translation name="VirusTotalNoDataReceived" id="35">The internet connection failed</translation>
<translation name="VirusTotalNotInRepository" id="36">The image does not yet exist in the repository</translation>
<translation name="VirusTotalWaitWhileSubmitting" id="37">wait...</translation>
<translation name="VirusTotalEnableSubmission" id="38">Please Enable the VirusTotal Submission</translation>
<translation name="VirusTotalLookupInBrowser" id="39">Lookup in Browser</translation>
<translation name="VirusTotalUpdateInPeStudio" id="40">Update</translation>
<translation name="VirusTotalDisabled" id="41">disabled</translation>
<translation name="VirusTotalScanId" id="42">Scan id</translation>
<translation name="VirusTotalResource" id="43">resource</translation>
<translation name="VirusTotalResponseCode" id="44">Response code</translation>
<translation name="VirusTotalScanDate" id="45">Scan date</translation>
<translation name="VirusTotalPermaLink" id="46">Permanent link</translation>
<translation name="VirusTotalVerboseMessage" id="47">Verbose message</translation>
<translation name="VirusTotalTotal" id="48">Total</translation>
<translation name="VirusTotalPositives" id="49">Positives</translation>
<translation name="VirusTotalSha1" id="50">sha1</translation>
<translation name="VirusTotalSha256" id="51">sha256</translation>
<translation name="VirusTotalMd5" id="52">md5</translation>
<translation name="VirusTotalDetails" id="53">details</translation>
<translation name="VirusTotalResult" id="54">result</translation>
<translation name="VirusTotalEngine" id="55">engine</translation>
<translation name="VirusTotal" id="56">virustotal</translation>
<translation name="VirusTotalHeader" id="57">header</translation>
<translation name="VirusTotalResults" id="58">results</translation>
<translation name="ImageSignature" id="59">signature</translation>
<!-- Exported Symbols -->
<translation name="ExportedSymbols" id="60">Exported symbols</translation>
<translation name="ExportedSymbolName" id="61">Name</translation>
<translation name="ExportedSymbolOrdinal" id="62">Ordinal</translation>
<translation name="ExportedSymbolAnonymous" id="63">Ordinal</translation>
<translation name="ExportedSymbolGap" id="64">Gap</translation>
<translation name="ExportedSymbolForwarded" id="65">Forwarded</translation>
<translation name="ExportedSymbolEntryPoint" id="66">Section:Offset</translation>
<translation name="ExportedSymbolBlackListed" id="67">Blacklisted</translation>
<translation name="ExportedSymbol" id="68">Symbol</translation>
<translation name="ExportedSymbolGaps" id="69">gap_entries_in_export_table</translation>
<translation name="ExportedSymbolEntryPointXml" id="70">entry_point</translation>
<translation name="ExportedSymbolHintXml" id="71">hint</translation>
<translation name="VirusTotalNetworkNotAlive" id="72">network not alive</translation>
<translation name="Imphash" id="73">Imphash</translation>
<translation name="" id="74"></translation>
<translation name="" id="75"></translation>
<translation name="" id="76"></translation>
<translation name="" id="77"></translation>
<translation name="" id="78"></translation>
<translation name="" id="79"></translation>
<translation name="" id="80"></translation>
<translation name="" id="81"></translation>
<translation name="" id="82"></translation>
<translation name="" id="83"></translation>
<translation name="" id="84"></translation>
<translation name="" id="85"></translation>
<translation name="" id="86"></translation>
<translation name="" id="87"></translation>
<translation name="" id="88"></translation>
<translation name="" id="89"></translation>
<!-- Directories -->
<translation name="Directories" id="90">Directories</translation>
<translation name="DirectoryName" id="91">Name</translation>
<translation name="DirectoryAddress" id="92">Address</translation>
<translation name="DirectoryRawAddress" id="93">Raw Address</translation>
<translation name="DirectorySize" id="94">Size (bytes)</translation>
<translation name="DirectoryAssociatedSection" id="95">Section</translation>
<translation name="DirectoryInvalid" id="96">Invalid</translation>
<translation name="DirectoryEmpty" id="97">Empty</translation>
<translation name="DirectoryMissing" id="98">Missing</translation>
<translation name="DirectorySection" id="99">section</translation>
<!-- Libraries -->
<translation name="Libraries" id="100">Imported libraries</translation>
<translation name="Library" id="101">Library</translation>
<translation name="LibraryType" id="102">Type</translation>
<translation name="LibraryVersion" id="103">File Version</translation>
<translation name="LibraryImageBase" id="104">Image Base</translation>
<translation name="LibraryImportedSymbols" id="105">Symbols</translation>
<translation name="LibraryCpuMismatch" id="106">CPU mismatch</translation>
<translation name="LibraryCpuType" id="107">type</translation>
<translation name="LibraryCpuWidth" id="108">CPU</translation>
<translation name="LibraryAll" id="109">All libraries</translation>
<translation name="LibraryImplicit" id="110">Implicit libraries</translation>
<translation name="LibraryDelayLoaded" id="111">Delay-loaded libraries</translation>
<translation name="LibraryMissing" id="112">Missing</translation>
<translation name="LibraryBlacklisted" id="113">Blacklisted</translation>
<translation name="LibraryDescription" id="114">Description</translation>
<translation name="LibraryInString" id="115">Imported Library</translation>
<translation name="LibraryIsBound" id="116">Bound</translation>
<translation name="" id="117"></translation>
<translation name="" id="118"></translation>
<!-- Imported Symbols -->
<translation name="ImportedSymbolUndocumented" id="119">Undocumented</translation>
<translation name="ImportedSymbols" id="120">Imported symbols</translation>
<translation name="ImportedSymbolsName" id="121">Symbol</translation>
<translation name="ImportedSymbolsAddress" id="122">Section:Offset</translation>
<translation name="ImportedSymbolsLibrary" id="123">Library</translation>
<translation name="ImportedSymbolsBlacklisted" id="124">Blacklisted</translation>
<translation name="ImportedSymbolsDeprecated" id="125">Deprecated</translation>
<translation name="XmlStringId_ImportedSymbolsAntiDebug" id="126">Anti-Debug</translation>
<translation name="ImportedSymbol" id="127">Imported Symbols</translation>
<translation name="StringsRegistries" id="128">Registries</translation>
<translation name="StringsUrls" id="129">Urls</translation>
<translation name="StringsMessagesTables" id="130">Messages Tables</translation>
<translation name="StringsUnclassified" id="131">Unclassified</translation>
<translation name="StringsVersionInfo" id="132">Version Information</translation>
<translation name="StringsStringsTables" id="133">Strings Tables</translation>
<translation name="StringsManifest" id="134">Manifest</translation>
<translation name="StringsCertificats" id="135">Certificates</translation>
<translation name="PrivilegedFunction" id="136">Elevated</translation>
<translation name="UnsafeFunction" id="137">Unsafe</translation>
<translation name="" id="138"></translation>
<translation name="" id="139"></translation>
<translation name="" id="140"></translation>
<translation name="" id="141"></translation>
<translation name="" id="142"></translation>
<translation name="" id="143"></translation>
<translation name="" id="144"></translation>
<translation name="" id="145"></translation>
<translation name="" id="146"></translation>
<translation name="" id="147"></translation>
<translation name="" id="148"></translation>
<translation name="" id="149"></translation>
<!-- General -->
<translation name="GeneralProperty" id="150">Property</translation>
<translation name="GeneralValue" id="151">Value</translation>
<translation name="GeneralDetails" id="152">Details</translation>
<translation name="GeneralStatus" id="153">Status</translation>
<translation name="GeneralHeaders" id="154">headers</translation>
<translation name="GeneralImage" id="155">image</translation>
<translation name="GeneralError" id="156">error</translation>
<translation name="GeneralToday" id="157">overview</translation>
<translation name="GeneralDate" id="158">date</translation>
<translation name="GeneralDateFormat" id="159">%.2i/%.2i/%.4i</translation>
<translation name="GeneralDateTime" id="160">time</translation>
<translation name="GeneralDateTimeFormat" id="161">%.2i:%.2i:%.2i</translation>
<translation name="GeneralSymbol" id="162">symbol</translation>
<translation name="GeneralAddress" id="163">address</translation>
<translation name="GeneralStrings" id="164">strings</translation>
<translation name="GeneralString" id="165">string</translation>
<translation name="GeneralFootPrints" id="166">footprints</translation>
<translation name="GeneralOverlay" id="167">overlay</translation>
<translation name="" id="168"></translation>
<translation name="" id="169"></translation>
<translation name="" id="170">Signature</translation>
<translation name="" id="171">Signature (PE00) that identifies the file as a PE format image file</translation>
<translation name="" id="172">Flags that indicate attributes of the Image file</translation>
<translation name="" id="173">Characteristics (field)</translation>
<translation name="" id="174">32bit Processor</translation>
<translation name="" id="175">Relocation stripped</translation>
<translation name="" id="176">Large Address Aware</translation>
<translation name="" id="177">The file should be run only on a uniprocessor computer</translation>
<translation name="" id="178">System Image</translation>
<translation name="" id="179">Dynamic-link library</translation>
<translation name="" id="180">Executable</translation>
<translation name="" id="181">Debug information stripped</translation>
<translation name="" id="182">If on a removable media, copy and run from the swap</translation>
<translation name="" id="183">If on a Network, copy and run from the swap</translation>
<translation name="" id="184">Maximum 96 (XP) or 65535 (Vista and higher)</translation>
<translation name="" id="185">The number of seconds (since 00:00 January 1, 1970), that indicates when the file was created</translation>
<translation name="" id="186">This value should be zero because COFF debugging information is deprecated</translation>
<translation name="" id="187">The size of the optional header</translation>
<translation name="" id="188"></translation>
<translation name="" id="189"></translation>
<translation name="" id="190"></translation>
<translation name="" id="191"></translation>
<translation name="" id="192"></translation>
<translation name="" id="193"></translation>
<translation name="" id="194"></translation>
<translation name="" id="195"></translation>
<translation name="" id="196"></translation>
<translation name="" id="197"></translation>
<translation name="" id="198"></translation>
<translation name="" id="199"></translation>
<!-- XML Report -->
<translation name="ReportMd5" id="200">md5</translation>
<translation name="ReportCertificate" id="201">certificate</translation>
<translation name="ReportResources" id="202">resources</translation>
<translation name="ReportType" id="203">type</translation>
<translation name="ReportInstance" id="204">instance</translation>
<translation name="ReportSizeInBytes" id="205">size</translation>
<translation name="ReportOffsetToRawData" id="206">offset_to_raw_data</translation>
<translation name="ReportCodePage" id="207">language</translation>
<translation name="ReportLanguage" id="208">language</translation>
<translation name="ReportManifest" id="209">manifest</translation>
<translation name="ReportManifestAssemblies" id="210">assemblies</translation>
<translation name="ReportManifestAssembly" id="211">assembly</translation>
<translation name="ReportNameAttribute" id="212">name</translation>
<translation name="ReportManifestType" id="213">type</translation>
<translation name="ReportManifestVersion" id="214">version</translation>
<translation name="ReportManifestToken" id="215">token</translation>
<translation name="ReportManifestLanguage" id="216">language</translation>
<translation name="ReportCount" id="217">count</translation>
<!-- Version -->
<translation name="VersionRawData" id="218">raw_data</translation>
<translation name="Version" id="219">version</translation>
<translation name="VersionAggregatedData" id="220">aggregated_data</translation>
<translation name="VersionInfo" id="221">VS_VERSIONINFO</translation>
<translation name="VersionInfoLength" id="222">wLength</translation>
<translation name="VersionInfoValueLength" id="223">wValueLength</translation>
<translation name="VersionInfoType" id="224">wType</translation>
<translation name="VersionInfoKey" id="225">szKey</translation>
<translation name="VersionInfoPadding1" id="226">Padding1</translation>
<translation name="VersionFixedFileInfo" id="227">VS_FIXEDFILEINFO</translation>
<translation name="VersionFixedFileInfoSignature" id="228">dwSignature</translation>
<translation name="VersionFixedFileInfoStrucVersion" id="229">dwStrucVersion</translation>
<translation name="VersionFixedFileInfoFileVersionMS" id="230">dwFileVersionMS</translation>
<translation name="VersionFixedFileInfoFileVersionLS" id="231">dwFileVersionLS</translation>
<translation name="VersionFixedFileInfoProductVersionMS" id="232">dwProductVersionMS</translation>
<translation name="VersionFixedFileInfoProductVersionLS" id="233">dwProductVersionLS</translation>
<translation name="VersionFixedFileInfoFileFlagsMask" id="234">dwFileFlagsMask</translation>
<translation name="VersionFixedFileInfoFileFlags" id="235">dwFileFlags</translation>
<translation name="VersionFixedFileInfoFileOS" id="236">dwFileOS</translation>
<translation name="VersionFixedFileInfoFileType" id="237">dwFileType</translation>
<translation name="VersionFixedFileInfoFileSubType" id="238">dwFileSubType</translation>
<translation name="VersionFixedFileInfoFileDateMS" id="239">dwFileDateMS</translation>
<translation name="VersionFixedFileInfoFileDateLS" id="240">dwFileDateLS</translation>
<translation name="" id="241"></translation>
<translation name="" id="242"></translation>
<translation name="" id="243"></translation>
<translation name="" id="244"></translation>
<translation name="" id="245"></translation>
<translation name="" id="246"></translation>
<translation name="" id="247"></translation>
<translation name="" id="248"></translation>
<translation name="" id="249"></translation>
<!-- StringFileInfo -->
<translation name="VersionStringFileInfo" id="250">StringFileInfo</translation>
<translation name="VersionStringFileInfoLanguage" id="251">Language</translation>
<translation name="VersionStringFileInfoLanguageCode" id="252">Code</translation>
<translation name="VersionStringFileInfoLanguageCharacterSet" id="253">Character_set</translation>
<translation name="VersionStringFileInfoItems" id="254">Items</translation>
<translation name="VersionStringFileInfoItem" id="255">Item</translation>
<translation name="VersionStringFileInfoName" id="256">Name</translation>
<translation name="VersionStringFileInfoValue" id="257">Value</translation>
<translation name="" id="258"></translation>
<translation name="" id="259"></translation>
<!-- (XML Report) DosStub fields -->
<translation name="DosStub" id="260">dos_stub</translation>
<translation name="" id="261"></translation>
<translation name="" id="262"></translation>
<translation name="" id="263"></translation>
<translation name="" id="264"></translation>
<translation name="" id="265"></translation>
<translation name="" id="266"></translation>
<translation name="" id="267"></translation>
<translation name="" id="268"></translation>
<translation name="" id="269"></translation>
<!-- Dos Header -->
<translation name="DosHeader" id="270">dos_header</translation>
<translation name="DosHeaderMagicNumber" id="271">e_magic</translation>
<translation name="DosHeaderBytesInLastPage" id="272">e_cblp</translation>
<translation name="DosHeaderPageInFile" id="273">e_cp</translation>
<translation name="DosHeaderRelocations" id="274">e_crlc</translation>
<translation name="DosHeaderSizeOfHeader" id="275">e_cparhdr</translation>
<translation name="DosHeaderMinExtraParagraphs" id="276">e_minalloc</translation>
<translation name="DosHeaderMaxExtraParagraphs" id="277">e_maxalloc</translation>
<translation name="DosHeaderInitialRelativeSp" id="278">e_ss</translation>
<translation name="DosHeaderInitialSp" id="279">e_sp</translation>
<translation name="DosHeaderChecksum" id="280">e_csum</translation>
<translation name="DosHeaderInitialIp" id="281">e_ip</translation>
<translation name="DosHeaderInitialCs" id="282">e_cs</translation>
<translation name="DosHeaderRelocationTable" id="283">e_lfarlc</translation>
<translation name="DosHeaderOverlayNumber" id="284">e_ovno</translation>
<translation name="DosHeaderOemId" id="285">e_oemid</translation>
<translation name="DosHeaderOemInfo" id="286">e_oeminfo</translation>
<translation name="DosHeaderPeHeaderOffset" id="287">e_lfanew</translation>
<translation name="DosStub" id="288">Dos Stub</translation>
<translation name="" id="289"></translation>
<!-- File Header -->
<translation name="FileHeader" id="290">file_header</translation>
<translation name="FileHeaderMachine" id="291">Machine</translation>
<translation name="FileHeaderNumberOfSections" id="292">NumberOfSections</translation>
<translation name="FileHeaderTimeDateStamp" id="293">TimeDateStamp</translation>
<translation name="FileHeaderPointerToSymbolTable" id="294">PointerToSymbolTable</translation>
<translation name="FileHeaderNumberOfSymbols" id="295">NumberOfSymbols</translation>
<translation name="FileHeaderSizeOfOptionalHeader" id="296">SizeOfOptionalHeader</translation>
<translation name="FileHeaderCharacteristics" id="297">Characteristics</translation>
<translation name="FileHeaderCharacteristicsReloc" id="298">IMAGE_FILE_RELOCS_STRIPPED</translation>
<translation name="FileHeaderCharacteristicsExe" id="299">IMAGE_FILE_EXECUTABLE_IMAGE</translation>
<translation name="FileHeaderCharacteristicsLarge" id="300">IMAGE_FILE_LARGE_ADDRESS_AWARE</translation>
<translation name="FileHeaderCharacteristics32bit" id="301">IMAGE_FILE_32BIT_MACHINE</translation>
<translation name="FileHeaderCharacteristicsUp" id="302">IMAGE_FILE_UP_SYSTEM_ONLY</translation>
<translation name="FileHeaderCharacteristicsSystem" id="303">IMAGE_FILE_SYSTEM</translation>
<translation name="FileHeaderCharacteristicsDll" id="304">IMAGE_FILE_DLL</translation>
<translation name="FileHeaderCharacteristicsDebug" id="305">IMAGE_FILE_DEBUG_STRIPPED</translation>
<translation name="FileHeaderCharacteristicsFileSwap" id="306">IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP</translation>
<translation name="FileHeaderCharacteristicsRemovable" id="307">IMAGE_FILE_NET_RUN_FROM_SWAP</translation>
<translation name="" id="308"></translation>
<translation name="" id="309"></translation>
<!-- Optional Header -->
<translation name="OptionalHeader" id="310">optional_header</translation>
<translation name="OptionalHeaderMagic" id="311">Magic</translation>
<translation name="OptionalHeaderMinorLinkerVersion" id="312">MinorLinkerVersion</translation>
<translation name="OptionalHeaderMajorLinkerVersion" id="313">MajorLinkerVersion</translation>
<translation name="OptionalHeaderSizeOfCode" id="314">SizeOfCode</translation>
<translation name="OptionalHeaderSizeOfInitializedData" id="315">SizeOfInitializedData</translation>
<translation name="OptionalHeaderSizeOfUninitializedData" id="316">SizeOfUninitializedData</translation>
<translation name="OptionalHeaderAddressOfEntryPoint" id="317">AddressOfEntryPoint</translation>
<translation name="OptionalHeaderBaseOfCode" id="318">BaseOfCode</translation>
<translation name="OptionalHeaderBaseOfData" id="319">BaseOfData</translation>
<translation name="OptionalHeaderImageBase" id="320">ImageBase</translation>
<translation name="OptionalHeaderSectionAlignment" id="321">SectionAlignment</translation>
<translation name="OptionalHeaderFileAlignment" id="322">FileAlignment</translation>
<translation name="OptionalHeaderMajorOsVersion" id="323">MajorOperatingSystemVersion</translation>
<translation name="OptionalHeaderMinorOsVersion" id="324">MinorOperatingSystemVersion</translation>
<translation name="OptionalHeaderMajorImageVersion" id="325">MajorImageVersion</translation>
<translation name="OptionalHeaderMinorImageVersion" id="326">MinorImageVersion</translation>
<translation name="OptionalHeaderMajorSubsystemVersion" id="327">MajorSubSystemVersion</translation>
<translation name="OptionalHeaderMinorSubsystemVersion" id="328">MinorSubSystemVersion</translation>
<translation name="OptionalHeaderWin32VersionValue" id="329">Win32VersionValue</translation>
<translation name="OptionalHeaderSizeOfImage" id="330">SizeOfImage</translation>
<translation name="OptionalHeaderSizeOfHeaders" id="331">SizeOfHeaders</translation>
<translation name="OptionalHeaderCheckSum" id="332">CheckSum</translation>
<translation name="OptionalHeaderSubsystem" id="333">subsystem</translation>
<translation name="OptionalHeaderDllCharacteristics" id="334">DllCharacteristics</translation>
<translation name="OptionalHeaderDynamicBase" id="335">IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE</translation>
<translation name="OptionalHeaderForceIntegrity" id="336">IMAGE_DLL_CHARACTERISTICS_FORCE_INTEGRITY</translation>
<translation name="OptionalHeaderNxCompat" id="337">IMAGE_DLL_CHARACTERISTICS_NX_COMPAT</translation>
<translation name="OptionalHeaderNoIsolation" id="338">IMAGE_DLL_CHARACTERISTICS_NO_ISOLATION</translation>
<translation name="OptionalHeaderNoSeh" id="339">IMAGE_DLL_CHARACTERISTICS_NO_SEH</translation>
<translation name="OptionalHeaderNoBind" id="340">IMAGE_DLL_CHARACTERISTICS_NO_BIND</translation>
<translation name="OptionalHeaderWdmDriver" id="341">IMAGE_DLL_CHARACTERISTICS_WDM_DRIVER</translation>
<translation name="OptionalHeaderTerminalServer" id="342">IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE</translation>
<translation name="OptionalHeaderSizeOfStackReserve" id="343">SizeOfStackReserve</translation>
<translation name="OptionalHeaderSizeOfStackCommit" id="344">SizeOfStackCommit</translation>
<translation name="OptionalHeaderSizeOfHeapReserve" id="345">SizeOfHeapReserve</translation>
<translation name="OptionalHeaderSizeOfHeapCommit" id="346">SizeOfHeapCommit</translation>
<translation name="OptionalHeaderLoaderFlags" id="347">LoaderFlags</translation>
<translation name="OptionalHeaderNumberOfRvaAndSizes" id="348">NumberOfRvaAndSizes</translation>
<translation name="" id="349"></translation>
<translation name="" id="350">The value that identifies the %s executable image file</translation>
<translation name="" id="351">The linker major version number</translation>
<translation name="" id="352">The linker minor version number</translation>
<translation name="" id="353">The sum of all code sections</translation>
<translation name="" id="354">The sum of all initialized data sections</translation>
<translation name="" id="355">The sum of all uninitialized data sections</translation>
<translation name="" id="356">The address of the entry point relative to the image base when the executable file is loaded into memory</translation>
<translation name="" id="357">The address that is relative to the image base of the beginning of code section when it is loaded into memory</translation>
<translation name="" id="358">The address that is relative to the image base of the beginning of data section when it is loaded into memory</translation>
<translation name="" id="359">The preferred address of the first byte of the image when loaded into memory</translation>
<translation name="" id="360">The alignment (in bytes) of sections when they are loaded into memory</translation>
<translation name="" id="361">The alignment (in bytes) that is used to align the raw data of sections in the image file</translation>
<translation name="" id="362">The field is reserved and must be zero</translation>
<translation name="" id="363">The size (in bytes) of the image, including all headers, as the image is loaded in memory</translation>
<translation name="" id="364">The combined size of the DOS stub, PE header, and section headers rounded up to a multiple of FileAlignment</translation>
<translation name="" id="365">The image file checksum</translation>
<translation name="" id="366">The major version number of the subsystem</translation>
<translation name="" id="367">The minor version number of the subsystem</translation>
<translation name="" id="368">The subsystem that is required to run the image</translation>
<translation name="" id="369">The size of the stack to reserve</translation>
<!-- VS_FIXEDFILEINFO fields -->
<translation name="FixedfileinfoFileMajorVersion" id="370">FileMajorVersion</translation>
<translation name="FixedfileinfoFileMinorVersion" id="371">FileMinorVersion</translation>
<translation name="FixedfileinfoFileVersionBuildNumber" id="372">FileVersionBuildNumber</translation>
<translation name="FixedfileinfoFileVersionRevisionNumber" id="373">FileVersionRevisionNumber</translation>
<!-- Optional Header suite.-->
<translation name="" id="374">The size of the stack to commit</translation>
<translation name="" id="375">The size of the local heap space to reserve</translation>
<translation name="" id="376">The size of the local heap space to commit</translation>
<translation name="" id="377">The number of data-directory entries in the optional header</translation>
<translation name="" id="378">The characteristics of the Image </translation>
<translation name="" id="379"></translation>
<!-- VarFileInfo fields -->
<translation name="VarFileInfo" id="380">VarFileInfo</translation>
<translation name="VarFileInfo_LanguageId" id="381">LanguageId</translation>
<translation name="VarFileInfo_CodePage" id="382">CodePage</translation>
<translation name="" id="383"></translation>
<translation name="" id="384"></translation>
<translation name="" id="385"></translation>
<translation name="" id="386"></translation>
<translation name="" id="387"></translation>
<translation name="" id="388"></translation>
<translation name="" id="389"></translation>
<translation name="" id="390"></translation>
<translation name="" id="391"></translation>
<translation name="" id="392"></translation>
<translation name="" id="393"></translation>
<translation name="" id="394"></translation>
<translation name="" id="395"></translation>
<translation name="" id="396"></translation>
<translation name="" id="397"></translation>
<translation name="" id="398"></translation>
<translation name="" id="399"></translation>
<!-- debugger fields -->
<translation name="Debuggers" id="400">debuggers</translation>
<translation name="debugger" id="401">debugger</translation>
<translation name="DebuggerGuid" id="402">guid</translation>
<translation name="DebuggerGuidFormat" id="403">%.4X-%2.X-%2.X-%1X%1X-%1X%1X%1X%1X%1X%1X</translation>
<translation name="DebuggerAge" id="404">age</translation>
<translation name="DebuggerRsds" id="405">rsds</translation>
<translation name="DebuggerNb09" id="406">nb09</translation>
<translation name="DebuggerNb10" id="407">nb10</translation>
<translation name="DebuggerNb11" id="408">nb11</translation>
<translation name="DebuggerFormat" id="409">format</translation>
<translation name="DebuggerPath" id="410">path</translation>
<translation name="" id="411"></translation>
<translation name="" id="412"></translation>
<translation name="" id="413"></translation>
<translation name="" id="414"></translation>
<translation name="" id="415"></translation>
<translation name="" id="416"></translation>
<translation name="" id="417"></translation>
<translation name="" id="418"></translation>
<translation name="" id="419"></translation>
<!-- ... fields -->
<translation name="" id="420"></translation>
<translation name="" id="421"></translation>
<translation name="" id="422"></translation>
<translation name="" id="423"></translation>
<translation name="" id="424"></translation>
<translation name="" id="425"></translation>
<translation name="" id="426"></translation>
<translation name="" id="427"></translation>
<translation name="" id="428"></translation>
<translation name="" id="429"></translation>
<translation name="" id="430"></translation>
<translation name="" id="431"></translation>
<translation name="" id="432"></translation>
<translation name="" id="433"></translation>
<translation name="" id="434"></translation>
<translation name="" id="435"></translation>
<translation name="" id="436"></translation>
<translation name="" id="437"></translation>
<translation name="" id="438"></translation>
<translation name="" id="439"></translation>
<!-- Imported Libraries fields -->
<translation name="ImportedLibraries" id="440">libraries</translation>
<translation name="ImportedLibrary" id="441">library</translation>
<translation name="ImportedLibraryBoundImports" id="442">BoundImports</translation>
<translation name="ImportedLibraryBoundImport" id="443">BoundImport</translation>
<translation name="ImportedLibraryBoundImportDate" id="444">BoundImportDate</translation>
<translation name="ImportedLibraryType" id="445">type</translation>
<translation name="ImportedLibrarySize" id="446">size</translation>
<translation name="ImportedLibraryLinkerVersion" id="447">linker_version</translation>
<translation name="ImportedLibraryLinkerChecksum" id="448">checksum</translation>
<translation name="ImportedLibraryFileVersion" id="449">file_version</translation>
<translation name="" id="450"></translation>
<translation name="" id="451"></translation>
<translation name="" id="452"></translation>
<translation name="" id="453"></translation>
<translation name="" id="454"></translation>
<translation name="" id="455"></translation>
<translation name="" id="456"></translation>
<translation name="" id="457"></translation>
<translation name="" id="458"></translation>
<translation name="" id="459"></translation>
<translation name="" id="460"></translation>
<translation name="" id="461"></translation>
<translation name="" id="462"></translation>
<translation name="" id="463"></translation>
<translation name="" id="464"></translation>
<translation name="" id="465"></translation>
<translation name="" id="466"></translation>
<translation name="" id="467"></translation>
<translation name="" id="468"></translation>
<translation name="" id="469"></translation>
<translation name="" id="470"></translation>
<translation name="" id="471"></translation>
<translation name="" id="472"></translation>
<translation name="" id="473"></translation>
<translation name="" id="474"></translation>
<translation name="" id="475"></translation>
<translation name="" id="476"></translation>
<translation name="" id="477"></translation>
<translation name="" id="478"></translation>
<translation name="" id="479">Entropy</translation>
<!-- Sections -->
<translation name="SectionHeaders" id="480">Sections</translation>
<translation name="SectionName" id="481">Name</translation>
<translation name="SectionVirtualSize" id="482">Virtual Size (bytes)</translation>
<translation name="SectionVirtualAddress" id="483">Virtual Address</translation>
<translation name="SectionRawSize" id="484">Raw Size (bytes)</translation>
<translation name="SectionRawAddress" id="485">Raw Address</translation>
<translation name="SectionCaveSize" id="486">Cave size (bytes)</translation>
<translation name="SectionContains" id="487">Contains</translation>
<translation name="SectionCharacteristics" id="488">Characteristics</translation>
<translation name="SectionBlackListed" id="489">Blacklisted</translation>
<translation name="SectionObfuscated" id="490">Obfuscated</translation>
<translation name="SectionRead" id="491">Read</translation>
<translation name="SectionWrite" id="492">Write</translation>
<translation name="SectionExecute" id="493">Execute</translation>
<translation name="SectionShared" id="494">Shared</translation>
<translation name="SectionEntryPoint" id="495">Entry Point</translation>
<translation name="SectionMd5" id="496">MD5</translation>
<translation name="Section" id="497">Section</translation>
<translation name="SectionVirtualSizeXml" id="498">VirtualSize</translation>
<translation name="SectionVirtualAddressXml" id="499">VirtualAddress</translation>
<translation name="SectionSizeOfRawDataXml" id="500">SizeOfRawData</translation>
<translation name="SectionPointerToRawDataXml" id="501">PointerToRawData</translation>
<translation name="SectionPointerToRelocationsXml" id="502">PointerToRelocations</translation>
<translation name="SectionPointerToLinenumbersXml" id="503">PointerToLinenumbers</translation>
<translation name="SectionNumberOfRelocationsXml" id="504">NumberOfRelocations</translation>
<translation name="SectionNumberOfLineNumbersXml" id="505">NumberOfLinenumbers</translation>
<translation name="SectionCharacteristicsXml" id="506">Characteristics</translation>
<translation name="Sections" id="507">Sections</translation>
<translation name="SectionCharacteristicCode" id="508">IMAGE_SCN_CNT_CODE</translation>
<translation name="SectionCharacteristicInitData" id="509">IMAGE_SCN_CNT_INITIALIZED_DATA</translation>
<translation name="SectionCharacteristicUninitData" id="510">IMAGE_SCN_CNT_UNINITIALIZED_DATA</translation>
<translation name="SectionCharacteristicDiscardable" id="511">IMAGE_SCN_MEM_DISCARDABLE</translation>
<translation name="SectionCharacteristicNotCached" id="512">IMAGE_SCN_MEM_NOT_CACHED</translation>
<translation name="SectionCharacteristicNotPaged" id="513">IMAGE_SCN_MEM_NOT_PAGED</translation>
<translation name="SectionCharacteristicShared" id="514">IMAGE_SCN_MEM_SHARED</translation>
<translation name="SectionCharacteristicExecute" id="515">IMAGE_SCN_MEM_EXECUTE</translation>
<translation name="SectionCharacteristicRead" id="516">IMAGE_SCN_MEM_READ</translation>
<translation name="SectionCharacteristicWrite" id="517">IMAGE_SCN_MEM_WRITE</translation>
<translation name="" id="518"></translation>
<translation name="" id="519"></translation>
<!-- Indicators -->
<translation name="Indicators" id="520">Indicators</translation>
<translation name="Indicator" id="521">Indicator</translation>
<!-- Mainframe Progress
<translation id="522">Drag and Drop a file to analyse...</translation>
-->
<DosHeader>
<translation id="1">e_magic</translation>
<translation id="11">Magic number (MZ)</translation>
</DosHeader>
</translations>
<ResourceFileVersion>
<fileOSes>
<fileOS name="VOS_DOS">MS-DOS</fileOS>
<fileOS name="VOS_NT">Windows NT</fileOS>
<fileOS name="VOS_WINDOWS16">Windows 16-bit</fileOS>
<fileOS name="VOS_WINDOWS32">Windows 32-bit</fileOS>
<fileOS name="VOS_OS216">OS/2 16-bit</fileOS>
<fileOS name="VOS_OS232">OS/2 32-bit</fileOS>
<fileOS name="VOS_PM16">Presentation Manager 16-bit</fileOS>
<fileOS name="VOS_PM32">Presentation Manager 32-bit</fileOS>
<fileOS name="VOS_UNKNOWN">Unknown</fileOS>
</fileOSes>
<fileTypes>
<fileType name="VFT_APP">Executable</fileType>
<fileType name="VFT_DLL">Dynamic-Link Library</fileType>
<fileType name="VFT_DRV">Device driver</fileType>
<fileType name="VFT_FONT">Font</fileType>
<fileType name="VFT_STATIC_LIB">Static-link library</fileType>
<fileType name="VFT_VXD">Virtual device</fileType>
<fileType name="VFT_UNKNOWN">Unknown</fileType>
</fileTypes>
<fileSubTypes>
<fileSubType name="VFT2_DRV_COMM">Communication Driver</fileSubType>
<fileSubType name="VFT2_DRV_DISPLAY">Display Driver</fileSubType>
<fileSubType name="VFT2_DRV_INSTALLABLE">Installable Driver</fileSubType>
<fileSubType name="VFT2_DRV_KEYBOARD">Keyboard Driver</fileSubType>
<fileSubType name="VFT2_DRV_LANGUAGE">Language Driver</fileSubType>
<fileSubType name="VFT2_DRV_MOUSE">Mouse driver</fileSubType>
<fileSubType name="VFT2_DRV_NETWORK">Network Driver</fileSubType>
<fileSubType name="VFT2_DRV_PRINTER">Printer Driver</fileSubType>
<fileSubType name="VFT2_DRV_SOUND">Sound Driver</fileSubType>
<fileSubType name="VFT2_DRV_SYSTEM">System Driver</fileSubType>
<fileSubType name="VFT2_DRV_VERSIONED_PRINTER">Printer Driver</fileSubType>
<fileSubType name="VFT2_UNKNOWN">Unknown Driver</fileSubType>
</fileSubTypes>
</ResourceFileVersion>
<!-- Relocation Type Friendly Names -->
<relocations>
<relocation>High</relocation>
<relocation>Low</relocation>
<relocation>High-Low</relocation>
<relocation>Low-High</relocation>
<relocation>Absolute</relocation>
<relocation>High-Ajust</relocation>
<relocation>Section</relocation>
<relocation>MIPS Jump Address</relocation>
<relocation>Rel32</relocation>
<relocation>Unknown</relocation>
</relocations>
<!-- Directories Friendly Names -->
<dirs>
<dir>Export Address Table</dir>
<dir>Import Name Table</dir>
<dir>resource</dir>
<dir>Exception</dir>
<dir>Security</dir>
<dir>Relocation</dir>
<dir>Debug</dir>
<dir>Architecture</dir>
<dir>Global Pointer</dir>
<dir>Thread Local Storage</dir>
<dir>Load Configuration</dir>
<dir>Bound Import</dir>
<dir>Import Address Table</dir>
<dir>Delay Loaded Import</dir>
<dir>COM Runtime</dir>
<dir>Reserved</dir>
</dirs>
<!-- Custom Resources Friendly Names -->
<resources>
<resource id="0">Manifest</resource>
<resource id="1">Cursor</resource>
<resource id="2">Bitmap</resource>
<resource id="3">Icon</resource>
<resource id="4">Menu</resource>
<resource id="5">Dialog</resource>
<resource id="6">String Table</resource>
<resource id="7">Message Table</resource>
<resource id="8">Font directory</resource>
<resource id="9">Font</resource>
<resource id="10">Accelerator</resource>
<resource id="11">RCData</resource>
<resource id="12">Cursor Group</resource>
<resource id="13">Icon Group</resource>
<resource id="14">Version Info</resource>
<resource id="15">DlgInclude</resource>
<resource id="16">PlugAndPlay</resource>
<resource id="17">VxD</resource>
<resource id="18">Animated Cursor</resource>
<resource id="19">Animated Icon</resource>
<resource id="20">Html</resource>
<resource id="21">MUI</resource>
<resource id="22">Icons</resource>
<resource id="23">Custom</resource>
<resource id="24">Executable</resource>
<resource id="25">Compiled HTML</resource>
<resource id="26">Riff</resource>
<resource id="27">GIF</resource>
<resource id="28">PNG</resource>
<resource id="29">BMP</resource>
<resource id="30">OLE</resource>
<resource id="31">Windows Registry Key</resource>
<resource id="32">Adobe PDF</resource>
<resource id="33">CAB</resource>
<resource id="34">PKZIP</resource>
<resource id="35">PKLITE</resource>
<resource id="36">PKSFX</resource>
<resource id="37">JAR</resource>
<resource id="38">Delphi</resource>
<resource id="39">7zSFX</resource>
<resource id="40">XML</resource>
<resource id="41">Managed Object Format</resource>
<resource id="42">XML Event Log</resource>
<resource id="43">Rich Text</resource>
<resource id="44">Nullsoft</resource>
<resource id="45">AutoIt</resource>
<resource id="46">NB10 Debug</resource>
<resource id="47">Spoon</resource>
<resource id="48">RAR</resource>
<resource id="49">Smart Installer</resource>
<resource id="50">InnoSetup</resource>
<resource id="51">Shockwave Flash</resource>
<resource id="52">Macromedia Flash</resource>
<resource id="53">DBG</resource>
<resource id="54">FPO Debug</resource>
<resource id="55">Text</resource>
<resource id="56">JPEG</resource>
<resource id="57">Windows Registry Editor Version 5.00 file</resource>
<resource id="58">aPLib compressed file</resource>
<resource id="59">Any</resource>
<resource id="60">Unknown</resource>
</resources>
<!-- Subsystems Friendly Names -->
<subsystems>
<subsystem>Native</subsystem>
<subsystem>GUI</subsystem>
<subsystem>Console</subsystem>
<subsystem>OS/2 character</subsystem>
<subsystem>Posix</subsystem>
<subsystem>Native Win9x driver</subsystem>
<subsystem>CE</subsystem>
<subsystem>EFI Application</subsystem>
<subsystem>EFI driver with boot services</subsystem>
<subsystem>EFI driver with run-time services</subsystem>
<subsystem>EFI ROM image</subsystem>
<subsystem>XBox</subsystem>
<subsystem>Boot application</subsystem>
</subsystems>
<!-- Target Machines Friendly Names -->
<targetMachines>
<targetMachine>Intel</targetMachine>
<targetMachine>MipsR3000</targetMachine>
<targetMachine>MipsR6000</targetMachine>
<targetMachine>MipsR10000</targetMachine>
<targetMachine>Mipsv2</targetMachine>
<targetMachine>Alpha</targetMachine>
<targetMachine>SH3</targetMachine>
<targetMachine>SH3DSP</targetMachine>
<targetMachine>SH3E</targetMachine>
<targetMachine>SH4</targetMachine>
<targetMachine>SH5</targetMachine>
<targetMachine>ARM</targetMachine>
<targetMachine>ARMv7</targetMachine>
<targetMachine>Thumb</targetMachine>
<targetMachine>AM33</targetMachine>
<targetMachine>PowerPc</targetMachine>
<targetMachine>PowerPcfp</targetMachine>
<targetMachine>IA64</targetMachine>
<targetMachine>Mips16</targetMachine>
<targetMachine>Alpha64</targetMachine>
<targetMachine>MipsFpu</targetMachine>
<targetMachine>MipsFpu16</targetMachine>
<targetMachine>Axp64</targetMachine>
<targetMachine>TriCore</targetMachine>
<targetMachine>CEF</targetMachine>
<targetMachine>EBC</targetMachine>
<targetMachine>Amd64</targetMachine>
<targetMachine>M32R</targetMachine>
<targetMachine>CEE</targetMachine>
</targetMachines>
<!-- debugger Types Friendly Names -->
<debuggers>
<debugger>COFF</debugger>
<debugger>NB09</debugger>
<debugger>NB10</debugger>
<debugger>NB11</debugger>
<debugger>RSDS</debugger>
<debugger>Fpo</debugger>
<debugger>DBG</debugger>
<debugger>Exception</debugger>
<debugger>Fixu</debugger>
<debugger>OmapToSrc</debugger>
<debugger>OmapFromSrc</debugger>
<debugger>Borland</debugger>
<debugger>Reserved10</debugger>
<debugger>Clsid</debugger>
<debugger>Unknown</debugger>
</debuggers>
<!-- Character Sets Friendly Names -->
<characterSets>
<characterSet>7-bit ASCII</characterSet>
<characterSet>Japan (Shift JIS X-0208)</characterSet>
<characterSet>Korea (Shift KSC 5601)</characterSet>
<characterSet>Taiwan (Big5)</characterSet>
<characterSet>Unicode</characterSet>
<characterSet>Latin-2 (Eastern European)</characterSet>
<characterSet>Cyrillic</characterSet>
<characterSet>Multilingual</characterSet>
<characterSet>Greek</characterSet>
<characterSet>Turkish</characterSet>
<characterSet>Hebrew</characterSet>
<characterSet>Arabic</characterSet>
</characterSets>
<indicators>
<indicator id="6">Severe</indicator>
<indicator id="5">Attention</indicator>
<indicator id="4">Warning</indicator>
<indicator id="3">Information</indicator>
<indicator id="2">Almost</indicator>
<indicator id="1">Good</indicator>
</indicators>
<dependencies>
<dependency>Implicit</dependency>
<dependency>Delay-loaded</dependency>
<dependency>Forwarded</dependency>
</dependencies>
<manifest>
<level>Administrator</level>
<level>Highest</level>
<level>Invoker</level>
</manifest>
<obfuscators>
<obfuscator id="0">UPX</obfuscator>
<obfuscator id="1">MPRESS</obfuscator>
<obfuscator id="2">PECompact</obfuscator>
</obfuscators>
<Sddls>
<sddl id="1">Deny all access to %s</sddl>
<sddl id="2">Allow all access to %</sddl>
<sddl id="3">Allow all read access to %s</sddl>
</Sddls>
<trustees>
<trustee id="0">Account operators</trustee>
<trustee id="1">Alias to allow previous Windows 2000</trustee>
<trustee id="2">Anonymous logon</trustee>
<trustee id="3">Authenticated users</trustee>
<trustee id="4">Built-in administrators</trustee>
<trustee id="5">Built-in guests</trustee>
<trustee id="6">Backup operators</trustee>
<trustee id="7">Built-in users</trustee>
<trustee id="8">Certificate server administrators</trustee>
<trustee id="9">Creator group</trustee>
<trustee id="10">Creator owner</trustee>
<trustee id="11">Domain administrators</trustee>
<trustee id="12">Domain computers</trustee>
<trustee id="13">Domain controllers</trustee>
<trustee id="14">Domain guests</trustee>
<trustee id="15">Domain users</trustee>
<trustee id="16">Enterprise administrators</trustee>
<trustee id="17">Enterprise domain controllers</trustee>
<trustee id="18">Everyone</trustee>
<trustee id="19">Group Policy administrators</trustee>
<trustee id="20">Interactively logged-on user</trustee>
<trustee id="21">Local administrator</trustee>
<trustee id="22">Local guest</trustee>
<trustee id="23">Local service account</trustee>
<trustee id="24">Local system</trustee>
<trustee id="25">Network logon user</trustee>
<trustee id="26">Network configuration operators</trustee>
<trustee id="27">Network service account</trustee>
<trustee id="28">Printer operators</trustee>
<trustee id="29">Personal self</trustee>
<trustee id="30">Power users</trustee>
<trustee id="31">RAS servers group</trustee>
<trustee id="32">Terminal server users</trustee>
<trustee id="33">Replicator</trustee>
<trustee id="34">Restricted code</trustee>
<trustee id="35">Schema administrators</trustee>
<trustee id="36">Server operators</trustee>
<trustee id="37">Service logon user</trustee>
</trustees>
<knownResources>
<knownResource id="0">Office Word</knownResource>
<knownResource id="1">Media Player</knownResource>
<knownResource id="2">Windows</knownResource>
<knownResource id="3">Windows Explorer</knownResource>
<knownResource id="4">Internet Explorer</knownResource>
<knownResource id="5">Regedit</knownResource>
<knownResource id="6">VisualBasic</knownResource>
<knownResource id="7">Adobe Reader</knownResource>
<knownResource id="8">Flash</knownResource>
<knownResource id="9">Filezilla</knownResource>
<knownResource id="10">Chrome</knownResource>
<knownResource id="11">Avira</knownResource>
<knownResource id="12">MSI</knownResource>
<knownResource id="13">WinRAR</knownResource>
<knownResource id="14">WinZip</knownResource>
<knownResource id="15">MFC</knownResource>
<knownResource id="16">TeamViewer</knownResource>
<knownResource id="17">Sysinternals</knownResource>
<knownResource id="18">pestudio</knownResource>
<knownResource id="19">Karspersky</knownResource>
<knownResource id="20">NotePad++</knownResource>
<knownResource id="21">Manifest</knownResource>
<knownResource id="22">Office Excel</knownResource>
<knownResource id="23">Facebook</knownResource>
<knownResource id="24">Symantec</knownResource>
<knownResource id="25">Google+</knownResource>
<knownResource id="26">Yahoo</knownResource>
<knownResource id="27">Unknown</knownResource>
</knownResources>
<sids>
<!-- following list (based on https://github.com/gleeda/Volatility-Plugins/blob/master/getservicesids.py)
used in pestudio with authorization of Jamie Levy (Gleeda) jamie.levy@gmail.com -->
<sid text=".NET CLR Data">S-1-5-80-3476726845-1218940557-3240126423-1396283824-3706223860</sid>
<sid text=".NET CLR Networking">S-1-5-80-3749761688-76038143-2425834820-4129736068-309120712</sid>
<sid text=".NET Data Provider for Oracle">S-1-5-80-603392709-3706100282-1779817366-3290147925-2109454977</sid>
<sid text=".NET Data Provider for SqlServer">S-1-5-80-1168016597-2140435647-491797002-352772175-817350590</sid>
<sid text=".NETFramework">S-1-5-80-255220978-1106536095-1636044468-311807000-281316439</sid>
<sid text="1394ohci">S-1-5-80-799694863-4024754253-4060439485-3284853837-2852070736</sid>
<sid text="ACPI">S-1-5-80-550892281-1246201444-2906082186-2301917840-2280485454</sid>
<sid text="AcpiPmi">S-1-5-80-2750316143-92726786-3671103447-4285640526-595803658</sid>
<sid text="adp94xx">S-1-5-80-4277731759-3688284049-1726419820-405794046-874834352</sid>
<sid text="adpahci">S-1-5-80-1668430318-2462354215-3771841206-4231263990-2365432302</sid>
<sid text="adpu320">S-1-5-80-1558789706-915067316-2610504951-4085128407-2746609837</sid>
<sid text="adsi">S-1-5-80-2580340827-1408356417-1236233457-3361088231-1362281560</sid>
<sid text="AeLookupSvc">S-1-5-80-1452425288-2709461340-3274533413-2407537074-986069024</sid>
<sid text="AFD">S-1-5-80-958185937-3813565417-3041720555-255702914-2218388865</sid>
<sid text="agp440">S-1-5-80-1478021307-2683864309-2840291008-2654641652-1914939368</sid>
<sid text="aic78xx">S-1-5-80-2964793103-1312530465-1873688160-795174673-2945876561</sid>
<sid text="ALG">S-1-5-80-2387347252-3645287876-2469496166-3824418187-3586569773</sid>
<sid text="aliide">S-1-5-80-1587539839-2488332913-1287008632-3751426284-4220573165</sid>
<sid text="amdagp">S-1-5-80-2808999507-317517852-2612044860-3916887390-3713671788</sid>
<sid text="amdide">S-1-5-80-4100430975-1934021090-490597466-3817433801-2954987127</sid>
<sid text="AmdK8">S-1-5-80-2291534435-3322220689-2735625597-3465650106-1340236923</sid>
<sid text="AmdPPM">S-1-5-80-4046459391-4016695280-780100908-1621843708-2839135617</sid>
<sid text="amdsata">S-1-5-80-1967003600-1747618720-202510732-1118110944-2056302645</sid>
<sid text="amdsbs">S-1-5-80-3946629880-3877146532-1020811794-3209710663-3707805237</sid>
<sid text="amdxata">S-1-5-80-2663151763-304964558-3327380674-1150567875-3378868591</sid>
<sid text="AppID">S-1-5-80-4206070390-3011771559-4179333097-3486196663-2896243697</sid>
<sid text="AppIDSvc">S-1-5-80-2078495744-2416903469-4072184685-3943858305-976987417</sid>
<sid text="Appinfo">S-1-5-80-1345931346-2714066941-3624776837-1617505694-3927660246</sid>
<sid text="AppMgmt">S-1-5-80-3213379692-3546485254-1309469428-3810262102-2442199571</sid>
<sid text="arc">S-1-5-80-2586396289-3967100905-3140788560-3910242148-3554126937</sid>
<sid text="arcsas">S-1-5-80-4275531960-1601664531-2254151532-3075236607-956726506</sid>
<sid text="AsyncMac">S-1-5-80-3772676405-1029441937-3739550121-1000989080-3364480489</sid>
<sid text="atapi">S-1-5-80-3126347352-2401679295-1536073615-3396758597-3783091149</sid>
<sid text="AudioEndpointBuilder">S-1-5-80-1580948945-3239616721-2529237571-3761093093-1214243633</sid>
<sid text="Audiosrv">S-1-5-80-2676549577-1911656217-2625096541-4178041876-1366760775</sid>
<sid text="AxInstSV">S-1-5-80-1058592404-331734164-3167594226-3910907650-1299295147</sid>
<sid text="b06bdrv">S-1-5-80-1401731874-3996074688-1963706087-3130220608-1140295258</sid>
<sid text="b57nd60x">S-1-5-80-528874604-3378394362-3426265968-3876211711-2956305666</sid>
<sid text="BattC">S-1-5-80-2490514847-2461341327-10008697-1811907875-602803682</sid>
<sid text="BDESVC">S-1-5-80-2962817144-200689703-2266453665-3849882635-1986547430</sid>
<sid text="Beep">S-1-5-80-3186183977-1861961257-3523979229-167170737-1516062821</sid>
<sid text="BFE">S-1-5-80-1383147646-27650227-2710666058-1662982300-1023958487</sid>
<sid text="BITS">S-1-5-80-864916184-135290571-3087830041-1716922880-4237303741</sid>
<sid text="blbdrive">S-1-5-80-3199704608-2688121514-1535149675-608666402-3313731745</sid>
<sid text="bowser">S-1-5-80-26818074-245702967-483560604-1005139437-3076944027</sid>
<sid text="BrFiltLo">S-1-5-80-1926592986-1411939489-3259133927-4064956769-2216240612</sid>
<sid text="BrFiltUp">S-1-5-80-3843808474-1199403037-3395254522-1605808544-3221186762</sid>
<sid text="Browser">S-1-5-80-764937145-223273921-1726433829-265908364-3948077829</sid>
<sid text="Brserid">S-1-5-80-3715020542-2003794336-3716799247-4001019941-1245790858</sid>
<sid text="BrSerWdm">S-1-5-80-4014097382-2743177720-3750454595-1699596626-866516122</sid>
<sid text="BrUsbMdm">S-1-5-80-1195671069-1048138941-897119314-1432864274-834752102</sid>
<sid text="BrUsbSer">S-1-5-80-1736549233-1399426098-2600293700-2473969234-3259996387</sid>
<sid text="BTHMODEM">S-1-5-80-505608135-4274227953-3632766965-1888639892-3184055934</sid>
<sid text="BTHPORT">S-1-5-80-1409084391-1870647740-2731517552-2815089321-2189562539</sid>
<sid text="bthserv">S-1-5-80-2586557155-168560303-1373426920-983201488-1499765686</sid>
<sid text="cdfs">S-1-5-80-3223837281-1527595016-2901219760-1358189227-808820507</sid>
<sid text="cdrom">S-1-5-80-364680967-1232085744-2960737863-915504889-2752576923</sid>
<sid text="CertPropSvc">S-1-5-80-3256172449-2363790065-3617575471-4144056108-756904704</sid>
<sid text="circlass">S-1-5-80-4066704878-4231214995-2335031091-3527122690-1574766183</sid>
<sid text="CLFS">S-1-5-80-1506673549-1532669541-769420574-1605323189-863873827</sid>
<sid text="clr_optimization_v2.0.50727_32">S-1-5-80-776041216-1751974135-1557427478-1892253070-796752000</sid>
<sid text="CmBatt">S-1-5-80-452204072-1743664639-1560983493-2640850116-597529692</sid>
<sid text="cmdide">S-1-5-80-979911607-31916023-2827320217-2656655436-259985251</sid>
<sid text="CNG">S-1-5-80-3573738861-3694853854-361022443-2442358023-2743921644</sid>
<sid text="Compbatt">S-1-5-80-3960644792-2999129865-644014482-29643289-3842828219</sid>
<sid text="CompositeBus">S-1-5-80-832194277-1022982267-2217674263-2896671990-3011983110</sid>
<sid text="COMSysApp">S-1-5-80-593875016-1044814911-1112741138-2143646632-2690613739</sid>
<sid text="crcdisk">S-1-5-80-3158764370-1001901224-1854525633-1718604346-2756706540</sid>
<sid text="Crusoe">S-1-5-80-3747264324-1669729390-1715156009-1010652712-2439569381</sid>
<sid text="crypt32">S-1-5-80-3020380856-1381845346-309829523-1810616773-418643442</sid>
<sid text="CryptSvc">S-1-5-80-242729624-280608522-2219052887-3187409060-2225943459</sid>
<sid text="CSC">S-1-5-80-3601020880-2087999432-167179594-730776211-2997520967</sid>
<sid text="CscService">S-1-5-80-1987853863-1639573247-1110726908-1137832616-3599624523</sid>
<sid text="DCLocator">S-1-5-80-1564160128-141119064-743480990-78466790-746535033</sid>
<sid text="DcomLaunch">S-1-5-80-1601830629-990752416-3372939810-977361409-3075122917</sid>
<sid text="defragsvc">S-1-5-80-654447679-1163530548-981569129-3608673666-3128964045</sid>
<sid text="DfsC">S-1-5-80-3837255464-839197112-3211601036-3795322556-2690640524</sid>
<sid text="DFSR">S-1-5-80-1267473060-1890374259-1137250836-544356534-2546457154</sid>
<sid text="Dhcp">S-1-5-80-2940520708-3855866260-481812779-327648279-1710889582</sid>
<sid text="discache">S-1-5-80-2142581517-3954605861-2373846864-2138305209-1019737370</sid>
<sid text="Disk">S-1-5-80-1827140278-1118305254-4004251663-1512899043-4081885502</sid>
<sid text="Dnscache">S-1-5-80-859482183-879914841-863379149-1145462774-2388618682</sid>
<sid text="dot3svc">S-1-5-80-3787436395-2174616005-3003730137-1094982900-1570567328</sid>
<sid text="DPS">S-1-5-80-2970612574-78537857-698502321-558674196-1451644582</sid>
<sid text="drmkaud">S-1-5-80-338020179-181244551-1629881386-919369987-4169324252</sid>
<sid text="DXGKrnl">S-1-5-80-3820654016-1545322283-1804062181-1022271772-3696306321</sid>
<sid text="E1G60">S-1-5-80-2212058837-3965059022-779215765-3282659977-917192320</sid>
<sid text="EapHost">S-1-5-80-3578261754-285310837-913589462-2834155770-667502746</sid>
<sid text="Ecache">S-1-5-80-2437473203-2648204866-3612751994-635271166-3967841232</sid>
<sid text="ebdrv">S-1-5-80-1191957972-1903257272-3657591267-1787121440-2523964525</sid>
<sid text="EFS">S-1-5-80-730263862-4055390735-403826019-1175694336-1277635259</sid>
<sid text="ehRecvr">S-1-5-80-567955335-3455378119-3305749985-2554534624-1867504835</sid>
<sid text="Media Center Scheduler Service">S-1-5-80-3864065939-1897331054-469427076-3133256761-1570309435</sid>
<sid text="ehstart">S-1-5-80-2913099195-3001839937-1914692661-1563395363-459793767</sid>
<sid text="elxstor">S-1-5-80-3118383011-3159412168-3368304685-4081854189-1392756948</sid>
<sid text="EmdCache">S-1-5-80-1436322865-2295268783-31549072-3549518694-69512146</sid>
<sid text="EMDMgmt">S-1-5-80-557382581-4103702789-1349398007-826115979-1301810884</sid>
<sid text="ErrDev">S-1-5-80-1580004045-3657569029-3054886754-3760858607-1347140441</sid>
<sid text="ESENT">S-1-5-80-1163726475-4032819940-2637749356-1655080563-3495319901</sid>
<sid text="eventlog">S-1-5-80-880578595-1860270145-482643319-2788375705-1540778122</sid>
<sid text="EventSystem">S-1-5-80-1772571935-1555666882-3369284645-1675012128-2386634627</sid>
<sid text="exfat">S-1-5-80-339744372-1785209941-194342311-2969164887-2874010346</sid>
<sid text="fastfat">S-1-5-80-3825849991-4144931059-247537738-1429287757-2349637904</sid>
<sid text="Fax">S-1-5-80-2117685068-4011115449-2646761356-2137676340-222423812</sid>
<sid text="fdc">S-1-5-80-678085088-615808128-1967178352-3804608619-208504977</sid>
<sid text="fdPHost">S-1-5-80-364023826-931424190-487969545-1024119571-74567675</sid>
<sid text="FDResPub">S-1-5-80-3215268152-2863950836-530904203-4246843131-2183915461</sid>
<sid text="FileInfo">S-1-5-80-3048209083-3162952562-941345871-1437532549-835501875</sid>
<sid text="Filetrace">S-1-5-80-1352441077-2188484239-1994186818-620473926-3758853310</sid>
<sid text="flpydisk">S-1-5-80-2678475722-3718149211-1393662077-3558562392-2203603517</sid>
<sid text="FltMgr">S-1-5-80-916285479-1714977700-1732101595-331036679-1735462769</sid>
<sid text="FontCache">S-1-5-80-3655275221-2954682349-3644260495-855223267-1438849333</sid>
<sid text="FontCache3.0.0.0">S-1-5-80-3782458156-2098404076-3767342964-3617937256-1389734963</sid>
<sid text="FsDepends">S-1-5-80-4244156434-496195918-1908400060-3754471672-3389379472</sid>
<sid text="Fs_Rec">S-1-5-80-1638897150-273717933-3197303335-567190659-606579740</sid>
<sid text="fvevol">S-1-5-80-221025945-1494805562-2841517651-3196795133-192498206</sid>
<sid text="gagp30kx">S-1-5-80-1150850083-1108777032-2236282716-3985597815-2701820264</sid>
<sid text="gpsvc">S-1-5-80-2024188204-2445810227-898691311-2942020084-762398166</sid>
<sid text="hcw85cir">S-1-5-80-2384017851-2441776339-3346382083-2430645704-3475981877</sid>
<sid text="HDAudBus">S-1-5-80-2193151998-1100362924-2192368770-2985476713-896696503</sid>
<sid text="HidBatt">S-1-5-80-1648434057-4219984261-1802816958-334501717-1769477291</sid>
<sid text="HidBth">S-1-5-80-191977210-1053814073-2805336524-1775407748-120039257</sid>
<sid text="HidIr">S-1-5-80-498696395-104441048-3395182230-3082814586-1375447691</sid>
<sid text="hidserv">S-1-5-80-89818136-74175777-88572358-3912780041-2421659406</sid>
<sid text="HidUsb">S-1-5-80-1586586559-167648910-1414982260-3863830924-1724542190</sid>
<sid text="hkmsvc">S-1-5-80-1373701630-3910968185-3388013410-2492353-937432973</sid>
<sid text="HpCISSs">S-1-5-80-2291748755-1591405548-1905550586-2340871825-1258388485</sid>
<sid text="HomeGroupListener">S-1-5-80-4028305664-2774326660-44957573-2454826285-2129126537</sid>
<sid text="HomeGroupProvider">S-1-5-80-2620923248-4247863784-3378508180-2659151310-2535246811</sid>
<sid text="HpSAMD">S-1-5-80-3952044490-1864224763-1322162546-396143671-1619397437</sid>
<sid text="HTTP">S-1-5-80-3734987283-965611577-2130035942-3636592211-2616856863</sid>
<sid text="i2omp">S-1-5-80-970016657-3034632851-3048190821-4182690298-3323420226</sid>
<sid text="hwpolicy">S-1-5-80-3096896632-2411553352-2084109408-2930423838-4282791216</sid>
<sid text="i8042prt">S-1-5-80-738727139-3255065492-2264176241-1836141076-1899426695</sid>
<sid text="iaStorV">S-1-5-80-1156567179-1019273932-444819734-1772733284-2107707318</sid>
<sid text="idsvc">S-1-5-80-2984992224-2588614340-2167448307-2303456600-125847566</sid>
<sid text="iirsp">S-1-5-80-3218395955-317132717-2440444880-267201483-2700625476</sid>
<sid text="IKEEXT">S-1-5-80-698886940-375981264-2691324669-2937073286-3841916615</sid>
<sid text="inetaccs">S-1-5-80-3217419572-1740605331-1127140686-2317006352-2064317000</sid>
<sid text="intelide">S-1-5-80-3664101217-2276051299-423734030-2746486177-2766044424</sid>
<sid text="intelppm">S-1-5-80-817570274-767070440-2629795609-3336305482-1678804590</sid>
<sid text="IPBusEnum">S-1-5-80-2506443892-94066030-1663014834-2885971264-4189966690</sid>
<sid text="IpFilterDriver">S-1-5-80-2750735467-3008441591-3989401642-3215998983-1344927289</sid>
<sid text="iphlpsvc">S-1-5-80-62724632-2456781206-3863850748-1496050881-1042387526</sid>
<sid text="IpInIp">S-1-5-80-1361160473-1867727628-1338406996-3302040194-2851723982</sid>
<sid text="IPMIDRV">S-1-5-80-2771164118-4094026282-2266286801-3306161409-3436440840</sid>
<sid text="IPNAT">S-1-5-80-2368102602-26431353-856636621-1497418614-482242802</sid>
<sid text="IRENUM">S-1-5-80-433158070-3235422099-1317741036-1922328546-1834106188</sid>
<sid text="isapnp">S-1-5-80-1308614567-1511795785-2741360970-8197000-3264788676</sid>
<sid text="iScsiPrt">S-1-5-80-1446792217-3918178545-2165441202-3760590537-1875255596</sid>
<sid text="iteatapi">S-1-5-80-2249099846-2157059493-1994460756-1924820827-2369096692</sid>
<sid text="iteraid">S-1-5-80-750512324-770881543-4197932906-3645560491-3779161573</sid>
<sid text="kbdclass">S-1-5-80-1974511938-2400693546-1685170019-203554928-1466978163</sid>
<sid text="kbdhid">S-1-5-80-3058542000-3285469617-40650340-3734485625-1920508542</sid>
<sid text="KeyIso">S-1-5-80-1206118541-1677721718-2423781911-3372378849-3903984073</sid>
<sid text="KSecDD">S-1-5-80-3810688523-3855579666-1860693470-2666993558-46302070</sid>
<sid text="KSecPkg">S-1-5-80-638937566-1168471176-3064579757-2631269312-170126454</sid>
<sid text="KtmRm">S-1-5-80-2818357584-3387065753-4000393942-342927828-138088443</sid>
<sid text="LanmanServer">S-1-5-80-879696042-2351668846-370232824-2524288904-4023536711</sid>
<sid text="LanmanWorkstation">S-1-5-80-719998295-2833700043-1566817583-4093942769-1414026312</sid>
<sid text="ldap">S-1-5-80-3356507721-3148410333-1453554623-2317622189-363686743</sid>
<sid text="lltdio">S-1-5-80-1339741203-2503426401-303705627-250156843-1210515524</sid>
<sid text="lltdsvc">S-1-5-80-940647296-341435850-43817331-158078607-2483727905</sid>
<sid text="lmhosts">S-1-5-80-172094073-716411664-54255058-185476446-2329512179</sid>
<sid text="Lsa">S-1-5-80-1037107160-813189200-1860894220-2610408748-1807657940</sid>
<sid text="LSI_FC">S-1-5-80-973905250-3368826558-2408393701-2645888229-3042295110</sid>
<sid text="LSI_SAS">S-1-5-80-3066312493-2787136058-3895654580-111488809-2262703568</sid>
<sid text="LSI_SAS2">S-1-5-80-935126585-3333887566-2369146147-2658756633-3860083864</sid>
<sid text="LSI_SCSI">S-1-5-80-702453548-2563122194-4165184037-877730421-2039909086</sid>
<sid text="luafv">S-1-5-80-381203785-1552481550-3565819581-4159540168-38965703</sid>
<sid text="Mcx2Svc">S-1-5-80-3770938798-2726624435-2075025292-3280341113-3618470894</sid>
<sid text="megasas">S-1-5-80-1503963800-3543347063-2443146678-2767313893-605308357</sid>
<sid text="MegaSR">S-1-5-80-4024713676-1017792628-381990976-3540878265-1306153904</sid>
<sid text="MMCSS">S-1-5-80-2799810402-4136494038-1094338311-2889966999-3154753985</sid>
<sid text="Modem">S-1-5-80-2005225957-2795451222-469338742-3947262705-2044891099</sid>
<sid text="monitor">S-1-5-80-4207690787-1085901060-2295361997-2227230598-1253819078</sid>
<sid text="mouclass">S-1-5-80-675551267-1826535266-117093185-28668227-296166608</sid>
<sid text="mouhid">S-1-5-80-3854853272-3832246511-1244659077-3165440039-2262758429</sid>
<sid text="mountmgr">S-1-5-80-3601998905-441174471-4117363912-32772110-2632366064</sid>
<sid text="mpio">S-1-5-80-4261667920-1220466518-1749771309-2316901739-273317064</sid>
<sid text="mpsdrv">S-1-5-80-3142377179-3443479297-2149323391-1756545698-484011292</sid>
<sid text="MpsSvc">S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052</sid>
<sid text="Mraid35x">S-1-5-80-2250298043-1491746124-3447101336-2334414474-2555807208</sid>
<sid text="MRxDAV">S-1-5-80-2688027615-1506195528-3802338144-777155390-618458321</sid>
<sid text="mrxsmb">S-1-5-80-2162099894-1456621096-2119874347-3743340265-2368304946</sid>
<sid text="mrxsmb10">S-1-5-80-2676550360-252586896-1701879715-2742386574-1171030092</sid>
<sid text="mrxsmb20">S-1-5-80-3970894941-767821303-4047113619-2738918178-2351404876</sid>
<sid text="msahci">S-1-5-80-276420989-3971400029-4249224515-3588854300-972083571</sid>
<sid text="msdsm">S-1-5-80-827450036-3359053657-3286484322-221598818-2985401197</sid>
<sid text="MSDTC">S-1-5-80-3960419045-2460139048-4046793004-1809597027-2250574426</sid>
<sid text="MSDTC Bridge 3.0.0.0">S-1-5-80-1515650939-3601430262-2496924429-640160050-3998290523</sid>
<sid text="Msfs">S-1-5-80-3825916667-3375043415-3384654478-3177665693-2200644784</sid>
<sid text="mshidkmdf">S-1-5-80-4064639957-1408283007-2091294018-2122350837-1986927883</sid>
<sid text="msisadrv">S-1-5-80-537088188-2896597613-2307397767-3752262660-2081934664</sid>
<sid text="MSiSCSI">S-1-5-80-917953661-2020045820-2727011118-2260243830-4032185929</sid>
<sid text="msiserver">S-1-5-80-685333868-2237257676-1431965530-1907094206-2438021966</sid>
<sid text="MSKSSRV">S-1-5-80-1314579368-1827054856-3801607513-4137797117-3785845944</sid>
<sid text="MSPCLOCK">S-1-5-80-3515336427-2373706795-1189292716-3451446183-2383180522</sid>
<sid text="MSPQM">S-1-5-80-2550581486-1497628998-1973453189-3108482975-2816921478</sid>
<sid text="MsRPC">S-1-5-80-4273119239-1126992662-2069961181-78804100-786965295</sid>
<sid text="MSSCNTRS">S-1-5-80-2731410647-2404537004-1422510964-3385838496-1398925663</sid>
<sid text="mssmbios">S-1-5-80-2379877105-2122874852-2028670630-1350450415-3977667049</sid>
<sid text="MSTEE">S-1-5-80-294111013-494549581-4136661504-3518049416-761106507</sid>
<sid text="MTConfig">S-1-5-80-772196467-3194495650-2141286422-1986870660-3602995159</sid>
<sid text="Mup">S-1-5-80-2851636321-923882121-3805946377-1773657562-2703951580</sid>
<sid text="Network Access Protection (NAP) Agent">S-1-5-80-2006800713-1441093265-249754844-3404434343-1444102779</sid>
<sid text="NativeWifiP">S-1-5-80-3451137062-797777108-3464068327-231871278-2024511519</sid>
<sid text="NDIS">S-1-5-80-2183409222-222800135-1539000935-3109909370-1207982808</sid>
<sid text="NdisCap">S-1-5-80-1310191460-362243386-72972191-123604350-1188038626</sid>
<sid text="NdisTapi">S-1-5-80-3307576507-4040802919-832577921-47721884-821370673</sid>
<sid text="Ndisuio">S-1-5-80-2426641292-1095310648-1538795067-2456674997-547968854</sid>
<sid text="NdisWan">S-1-5-80-3137956796-3050520361-1309400342-955303752-3583020413</sid>
<sid text="NDProxy">S-1-5-80-3999445478-1493703614-491198216-2250085872-3662815299</sid>
<sid text="NetBIOS">S-1-5-80-298519744-3326885196-200884095-1345730765-1206919721</sid>
<sid text="NetBT">S-1-5-80-3481163626-3922336224-2171110286-845444925-873416656</sid>
<sid text="Netlogon">S-1-5-80-1589317753-1926951874-3424712441-2302911845-2572860984</sid>
<sid text="Netman">S-1-5-80-2898649604-2335086160-1904548223-3761738420-3855444835</sid>
<sid text="netprofm">S-1-5-80-3635958274-2059881490-2225992882-984577281-633327304</sid>
<sid text="NetTcpPortSharing">S-1-5-80-1773860938-1487242074-882566118-4272343956-2175834232</sid>
<sid text="nfrd960">S-1-5-80-3739586395-593861784-2557645679-4197025642-341497066</sid>
<sid text="NlaSvc">S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453</sid>
<sid text="Npfs">S-1-5-80-1093399993-2276725296-2148262981-2274078422-4284582767</sid>
<sid text="nsi">S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085</sid>
<sid text="nsiproxy">S-1-5-80-4100249314-4086313984-28913695-873679419-2144728263</sid>
<sid text="NTDS">S-1-5-80-1664281202-2302623734-631624840-3461998672-2259661997</sid>
<sid text="Ntfs">S-1-5-80-1256884789-1691082103-446998474-1367286246-1639025938</sid>
<sid text="ntrigdigi">S-1-5-80-2470698091-2858014709-2643764839-982706939-3434751516</sid>
<sid text="Null">S-1-5-80-2407861648-785230825-3529290450-2326204529-1810679516</sid>
<sid text="nvraid">S-1-5-80-3495072887-919096479-2204902451-1048921326-800355041</sid>
<sid text="nvstor">S-1-5-80-3611874924-3178792031-3565391826-286563291-3680247785</sid>
<sid text="nv_agp">S-1-5-80-2661219475-1923594960-1294537542-2454943126-82436970</sid>
<sid text="NwlnkFlt">S-1-5-80-4169196349-563482612-2169411968-43761830-802868667</sid>
<sid text="NwlnkFwd">S-1-5-80-1643415749-1981533051-3884744798-2669202348-601031005</sid>
<sid text="ohci1394">S-1-5-80-1196941233-2569882653-2923823926-962244991-4277418</sid>
<sid text="p2pimsvc">S-1-5-80-967499406-1694984581-2959056265-2481940682-939264259</sid>
<sid text="p2psvc">S-1-5-80-1971585524-2528565899-3324366483-1300752743-2325226580</sid>
<sid text="Parport">S-1-5-80-3473791808-4104434288-1928902041-1743473672-1277326840</sid>
<sid text="partmgr">S-1-5-80-156989346-1343554423-902067029-1673992682-1866693543</sid>
<sid text="Parvdm">S-1-5-80-4196153372-502005009-1971508045-3354250645-3015555128</sid>
<sid text="PcaSvc">S-1-5-80-1948712186-1330865447-943413596-1669284603-1648638051</sid>
<sid text="pci">S-1-5-80-2069178898-4023461412-1711560041-390887617-271771820</sid>
<sid text="pciide">S-1-5-80-4052642423-944120264-588619640-546327341-1110646568</sid>
<sid text="pcmcia">S-1-5-80-2795309555-3957969320-2916397881-2593713121-382316838</sid>
<sid text="pcw">S-1-5-80-59707871-3298565586-1716270302-948228651-1074156479</sid>
<sid text="PEAUTH">S-1-5-80-1570874813-103103538-3327933986-104584388-2119773521</sid>
<sid text="PeerDistSvc">S-1-5-80-3124040864-3101396827-3094488734-3028845762-1939139329</sid>
<sid text="PerfDisk">S-1-5-80-4023986828-1464965280-3211893748-414212150-4115790068</sid>
<sid text="PerfNet">S-1-5-80-2413971036-1590988147-3808667159-2204172745-1373631640</sid>
<sid text="PerfOS">S-1-5-80-3515570427-2977692895-3762163048-1504969852-99088878</sid>
<sid text="PerfProc">S-1-5-80-3544016446-4087985546-3773506770-1472693371-3235341583</sid>
<sid text="pla">S-1-5-80-2661322625-712705077-2999183737-3043590567-590698655</sid>
<sid text="PlugPlay">S-1-5-80-1981970923-922788642-3535304421-2999920573-318732269</sid>
<sid text="PNRPAutoReg">S-1-5-80-3141781312-1794533130-3616533224-2008760771-2116720301</sid>
<sid text="PNRPsvc">S-1-5-80-372467825-374176116-1198570892-3192490889-1232022613</sid>
<sid text="PolicyAgent">S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853</sid>
<sid text="PortProxy">S-1-5-80-4126081702-1836807445-3803306975-1029803806-2479180530</sid>
<sid text="Power">S-1-5-80-2343416411-2961288913-598565901-392633850-2111459193</sid>
<sid text="PptpMiniport">S-1-5-80-3735226416-1729687437-1959510470-190511368-398645692</sid>
<sid text="Processor">S-1-5-80-3367479018-119754134-174380200-3035551807-2744700953</sid>
<sid text="PROCEXP">S-1-5-80-2422153244-111630262-1029994140-3645224535-4078427153</sid>
<sid text="ProfSvc">S-1-5-80-3816717743-33564931-1112267079-3548917561-928358339</sid>
<sid text="ProtectedStorage">S-1-5-80-656433041-336319937-100815201-2263438610-4002557366</sid>
<sid text="Psched">S-1-5-80-133730547-3458667493-930392497-3658715967-3359215708</sid>
<sid text="ql2300">S-1-5-80-1010784341-3590640432-2144716203-2371202623-2111191834</sid>
<sid text="ql40xx">S-1-5-80-3680784227-2138494325-1045417256-846249285-1494284974</sid>
<sid text="QWAVE">S-1-5-80-1659118645-3148100556-861291880-3953320898-4045657812</sid>
<sid text="QWAVEdrv">S-1-5-80-3324762131-3390532780-137711907-1761928331-1932425801</sid>
<sid text="RasAcd">S-1-5-80-951069737-1097907447-3199478753-2018050253-2083677786</sid>
<sid text="RasAgileVpn">S-1-5-80-4022575210-2284560452-710265691-3594820739-387418549</sid>
<sid text="RasAuto">S-1-5-80-1802467488-1541022566-2033325545-854566965-652742428</sid>
<sid text="Rasl2tp">S-1-5-80-1290287420-3502600185-382990664-1700026297-1337626153</sid>
<sid text="RasMan">S-1-5-80-4176366874-305252471-2256717057-2714189771-3552532790</sid>
<sid text="RasPppoe">S-1-5-80-4122454071-3550668693-4211410744-1298358403-2272725717</sid>
<sid text="RasSstp">S-1-5-80-1331337031-2474836174-2661672254-391271513-2096420174</sid>
<sid text="rdbss">S-1-5-80-2489667-2470848582-3865645512-452901963-4178804252</sid>
<sid text="rdpbus">S-1-5-80-3687944073-3313860148-3136628839-3387249243-1709534714</sid>
<sid text="RDPCDD">S-1-5-80-2431288241-149984296-2543083935-4067350611-1975817884</sid>
<sid text="RDPDD">S-1-5-80-981872547-3861006530-3984275202-4085961120-2027028908</sid>
<sid text="RDPDR">S-1-5-80-23661045-4033652049-3526044993-1401805078-1749661838</sid>
<sid text="RDPENCDD">S-1-5-80-3464459778-79086046-1894495498-3954672505-2750168721</sid>
<sid text="RDPNP">S-1-5-80-191927475-3325244020-2133763035-2511185485-3827563125</sid>
<sid text="RDPREFMP">S-1-5-80-1432111213-2818786930-2152807080-3377190559-901933699</sid>
<sid text="RDPWD">S-1-5-80-1857653372-1313752195-3783661666-502273730-1171188227</sid>
<sid text="rdyboost">S-1-5-80-3474873350-2412947251-3085823233-2315640422-3546857610</sid>
<sid text="RemoteAccess">S-1-5-80-1954729425-4294152082-187165618-318331177-3831297489</sid>
<sid text="RemoteRegistry">S-1-5-80-2822507136-3601578665-1013168651-121944544-1825232178</sid>
<sid text="RpcEptMapper">S-1-5-80-521322694-906040134-3864710659-1525148216-3451224162</sid>
<sid text="RpcLocator">S-1-5-80-4056015446-1496461683-1723632270-3351149576-1119802320</sid>
<sid text="RpcSs">S-1-5-80-979556362-403687129-3954533659-2335141334-1547273080</sid>
<sid text="rspndr">S-1-5-80-25112808-303066962-2306571906-3820953744-554449017</sid>
<sid text="s3cap">S-1-5-80-3189092957-1825937568-2097962828-592273195-15751640</sid>
<sid text="SamSs">S-1-5-80-3453257571-682267348-3447719424-2810041157-893746920</sid>
<sid text="sbp2port">S-1-5-80-2172748946-1139208647-3745649895-1734051075-2323558886</sid>
<sid text="SCardSvr">S-1-5-80-1209419826-1829913269-3824447628-1153237837-3789837839</sid>
<sid text="scfilter">S-1-5-80-3145502940-3408664484-1477142494-2517801300-3177717725</sid>
<sid text="Schedule">S-1-5-80-4125092361-1567024937-842823819-2091237918-836075745</sid>
<sid text="SCPolicySvc">S-1-5-80-1691538513-4084330536-1620899472-1113280783-3554754292</sid>
<sid text="SDRSVC">S-1-5-80-2983134835-1185273323-1712700529-1489848661-2325612824</sid>
<sid text="secdrv">S-1-5-80-1722176216-3611007545-3657005850-3814612847-1080390000</sid>
<sid text="seclogon">S-1-5-80-1399994486-219206332-302438500-304602034-1537790326</sid>
<sid text="SENS">S-1-5-80-4259241309-1822918763-1176128033-1339750638-3428293995</sid>
<sid text="SensrSvc">S-1-5-80-3168472476-176724102-2968832672-2340942973-2241613192</sid>
<sid text="Serenum">S-1-5-80-1658387481-2925800327-3198882180-3147662777-2274689045</sid>
<sid text="Serial">S-1-5-80-3562253942-857828347-2712713407-944836455-3636585461</sid>
<sid text="sermouse">S-1-5-80-3369720968-4228855631-3683183521-2094993598-1022421131</sid>
<sid text="ServiceModelEndpoint 3.0.0.0">S-1-5-80-675414407-775065359-1035864904-999747831-2072146957</sid>
<sid text="erviceModelOperation 3.0.0.0">S-1-5-80-1904953591-2738210791-1061154185-3936071259-221446881</sid>
<sid text="ServiceModelService 3.0.0.0">S-1-5-80-297390187-2405189348-2222284465-2989988878-4218767654</sid>
<sid text="SessionEnv">S-1-5-80-4022436659-1090538466-1613889075-870485073-3428993833</sid>
<sid text="sffdisk">S-1-5-80-1220365695-3871163487-2301282001-885120026-718998505</sid>
<sid text="sffp_mmc">S-1-5-80-1593449009-2408870187-1077724223-1518188577-3728252823</sid>
<sid text="sffp_sd">S-1-5-80-1659054941-531967795-1983128084-3748020815-2241757750</sid>
<sid text="sfloppy">S-1-5-80-1407380289-3518059920-3931497022-2754447733-2222417609</sid>
<sid text="SharedAccess">S-1-5-80-2009329905-444645132-2728249442-922493431-93864177</sid>
<sid text="ShellHWDetection">S-1-5-80-1690854464-3758363787-3981977099-3843555589-1401248062</sid>
<sid text="sisagp">S-1-5-80-2037654479-150732571-4235160932-1988269395-3027078133</sid>
<sid text="SiSRaid2">S-1-5-80-2290943609-1211775869-3660739483-1432647055-1639441565</sid>
<sid text="SiSRaid4">S-1-5-80-1016766434-4163349990-2054491751-1265000292-413406215</sid>
<sid text="slsvc">S-1-5-80-2119565420-4155874467-2934723793-509086461-374458824</sid>
<sid text="SLUINotify">S-1-5-80-429025866-4105586292-427562881-1309981334-1060966148</sid>
<sid text="Smb">S-1-5-80-97513841-1071082959-3069755588-526311685-2961431215</sid>
<sid text="SMSvcHost 3.0.0.0">S-1-5-80-2400470686-1781479961-2091307112-2920730856-2901594176</sid>
<sid text="SNMPTRAP">S-1-5-80-3964583643-2633443559-2834438935-3739664028-1580655619</sid>
<sid text="spldr">S-1-5-80-2246094146-3761615012-3991572358-959820157-1291755210</sid>
<sid text="Spooler">S-1-5-80-3951239711-1671533544-1416304335-3763227691-3930497994</sid>
<sid text="sppsvc">S-1-5-80-123231216-2592883651-3715271367-3753151631-4175906628</sid>
<sid text="sppuinotify">S-1-5-80-2105443381-1869407242-828286827-1344996006-2512971347</sid>
<sid text="srv">S-1-5-80-3318989984-2647182497-3022510041-1919214433-3551303480</sid>
<sid text="srv2">S-1-5-80-1034188721-156321652-2901307485-3049929104-2850741453</sid>
<sid text="srvnet">S-1-5-80-385674269-2427993094-4248660116-187565782-2803330530</sid>
<sid text="SSDPSRV">S-1-5-80-486568272-975562994-1883531608-2732234258-332540751</sid>
<sid text="SstpSvc">S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314</sid>
<sid text="stexstor">S-1-5-80-2502136977-515215333-1091199184-4078967732-698071891</sid>
<sid text="StiSvc">S-1-5-80-3182985763-1431228038-2757062859-428472846-3914011746</sid>
<sid text="storflt">S-1-5-80-3877927215-2009774003-1789373229-1350139498-1490546062</sid>
<sid text="StorSvc">S-1-5-80-3355894222-2288616474-3163838539-1515771758-43395969</sid>
<sid text="storvsc">S-1-5-80-2227193670-1472088527-4216801891-1255609005-3742950393</sid>
<sid text="swenum">S-1-5-80-2499453150-1816575225-2698105218-861119070-2299588587</sid>
<sid text="swprv">S-1-5-80-1614360071-3471039648-1078047007-3707138327-1664821506</sid>
<sid text="Symc8xx">S-1-5-80-3277458932-3608563558-2424252742-1006353051-3439664691</sid>
<sid text="Sym_hi">S-1-5-80-714262929-1152213303-426872964-3738532716-4000887735</sid>
<sid text="Sym_u3">S-1-5-80-73616012-2741736120-1450548080-3749295283-3869351969</sid>
<sid text="SysMain">S-1-5-80-2590341223-3996088049-3993122417-23640849-324535191</sid>
<sid text="TabletInputService">S-1-5-80-949921180-3923668869-394927020-528789358-3592448931</sid>
<sid text="TapiSrv">S-1-5-80-4230913304-2206818457-801678004-120036174-1892434133</sid>
<sid text="TBS">S-1-5-80-4167276341-681140529-2035857140-584847688-708058301</sid>
<sid text="Tcpip">S-1-5-80-2869215396-3426808149-752611693-425565463-2833823703</sid>
<sid text="TCPIP6">S-1-5-80-842221325-3630721446-2015653073-424833842-1069621030</sid>
<sid text="TCPIP6TUNNEL">S-1-5-80-1243767512-207181711-1639953288-846964026-179032965</sid>
<sid text="tcpipreg">S-1-5-80-183440435-3873164873-1814133288-2746138770-1127128543</sid>
<sid text="TCPIPTUNNEL">S-1-5-80-517380867-1805075581-15937331-3649701458-2279870393</sid>
<sid text="TDPIPE">S-1-5-80-1205525636-1316560639-1871536985-2915653626-3847227622</sid>
<sid text="TDTCP">S-1-5-80-2653571336-860310240-1707811817-3246300807-2032786575</sid>
<sid text="tdx">S-1-5-80-1811008277-2130293716-2312968959-3698054739-726352487</sid>
<sid text="TermDD">S-1-5-80-600900383-3940208308-3622757659-1160125390-3717916961</sid>
<sid text="TermService">S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104</sid>
<sid text="Themes">S-1-5-80-1189432293-2777010110-2640223427-1344437502-1956879817</sid>
<sid text="THREADORDER">S-1-5-80-56840347-690487168-3179794702-1332568925-762031181</sid>
<sid text="TPAutoConnSvc">S-1-5-80-537470750-3688389562-3749243086-269898693-579266445</sid>
<sid text="TPVCGateway">S-1-5-80-1495131930-2676463755-2136540566-1190107536-2533052015</sid>
<sid text="TrkWks">S-1-5-80-768763963-4214222998-2156221936-2953597973-713500239</sid>
<sid text="TrustedInstaller">S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464</sid>
<sid text="TSDDD">S-1-5-80-602153688-1728218534-2156437410-2444491971-1703742505</sid>
<sid text="tssecsrv">S-1-5-80-3250179172-3414919659-2784612865-1947102831-1832745880</sid>
<sid text="tunmp">S-1-5-80-3666930311-739912689-1101093007-1147922636-412121971</sid>
<sid text="tunnel">S-1-5-80-3579196564-3960183121-2393617881-1570124860-2153905208</sid>
<sid text="uagp35">S-1-5-80-3249175164-480052304-527258952-251146422-1017202920</sid>
<sid text="udfs">S-1-5-80-4290168682-2694755981-2883756118-2205499398-4079537721</sid>
<sid text="UGatherer">S-1-5-80-2413584400-2834772909-3391057178-2993126719-4094614649</sid>
<sid text="UGTHRSVC">S-1-5-80-900581847-2069635957-4095211819-2149323943-1216697729</sid>
<sid text="UI0Detect">S-1-5-80-997887591-2350776071-3817597635-4146973621-2526406719</sid>
<sid text="uliagpkx">S-1-5-80-4194149548-235381792-2829184477-3934495640-667433095</sid>
<sid text="uliahci">S-1-5-80-2051301031-3598501189-881763489-2611917303-2352103085</sid>
<sid text="UlSata">S-1-5-80-4294381996-3573690956-4084941264-2318251564-135754816</sid>
<sid text="ulsata2">S-1-5-80-2849548708-3602852847-3953931013-1110249439-3333230880</sid>
<sid text="umbus">S-1-5-80-3018007626-163191633-622627787-1206491734-2917835273</sid>
<sid text="UmPass">S-1-5-80-2029728201-2796881031-2302868875-2454600822-1203790938</sid>
<sid text="UmRdpService">S-1-5-80-2014626298-1656748749-3847481816-918933055-2469338456</sid>
<sid text="upnphost">S-1-5-80-448846144-1414373772-1578130625-718576682-2306699751</sid>
<sid text="usb">S-1-5-80-3724553804-53543757-2557641770-141295351-1687883918</sid>
<sid text="usbccgp">S-1-5-80-4022141922-741376770-3260236731-1675477288-3792235576</sid>
<sid text="usbcir">S-1-5-80-2601879200-4032607390-2815923362-3101623786-2213233685</sid>
<sid text="usbehci">S-1-5-80-1032545752-2203350250-1701939687-317337126-3231707909</sid>
<sid text="usbhub">S-1-5-80-676136802-2607101929-335774531-4135730467-913299484</sid>
<sid text="usbohci">S-1-5-80-3434778094-456680973-2488395463-338906152-1015349184</sid>
<sid text="usbprint">S-1-5-80-3620574345-1163766744-4010839292-3531329841-768311061</sid>
<sid text="USBSTOR">S-1-5-80-376233901-499118290-773318279-1925188704-297947815</sid>
<sid text="usbuhci">S-1-5-80-2717376493-4290053016-2054941639-3048903775-1780974753</sid>
<sid text="UxSms">S-1-5-80-2815190569-4075358141-1041947382-2198045348-980246365</sid>
<sid text="VaultSvc">S-1-5-80-2901324718-895851292-2096622302-170690027-1637913602</sid>
<sid text="vdrvroot">S-1-5-80-2236596344-777810374-464678914-301799185-133794676</sid>
<sid text="vds">S-1-5-80-2196396108-1448510645-203779624-3888580976-3789157697</sid>
<sid text="vga">S-1-5-80-1636345116-1749775499-167646407-1402041886-784684825</sid>
<sid text="VgaSave">S-1-5-80-1604054522-1120073184-2766342441-3740248177-2194771659</sid>
<sid text="vhdmp">S-1-5-80-2349230263-3936233330-585165183-483748113-2063106807</sid>
<sid text="viaagp">S-1-5-80-269018121-2628019534-3958128902-1689023713-3977233287</sid>
<sid text="ViaC7">S-1-5-80-702914695-4281403409-954615538-3988029004-192649218</sid>
<sid text="viaide">S-1-5-80-3488702259-1115883433-1783531185-1350626685-2323838072</sid>
<sid text="vm3dmp">S-1-5-80-3414199520-1924951526-579304523-1555932441-262361574</sid>
<sid text="VMAUDIO">S-1-5-80-3316781363-2712907428-2579548995-1296955556-57435734</sid>
<sid text="vmbus">S-1-5-80-394042835-174396444-3357755573-789530950-2357907384</sid>
<sid text="VMBusHID">S-1-5-80-3485585108-3288609388-3381644673-894183282-3425970148</sid>
<sid text="vmci">S-1-5-80-2053731399-3564616636-592537298-4187980385-3071434599</sid>
<sid text="vmdebug">S-1-5-80-4081816966-3135276745-2345987325-2511854693-3099376874</sid>
<sid text="vmhgfs">S-1-5-80-2844247271-1920892496-2185725435-2733799570-1491885128</sid>
<sid text="VMMEMCTL">S-1-5-80-2713566713-2012099321-1704287870-164250842-2950185051</sid>
<sid text="vmmouse">S-1-5-80-616456234-2657522756-2692773202-1293725715-2143369223</sid>
<sid text="vmrawdsk">S-1-5-80-470576323-3739623512-411527224-1524486745-930631467</sid>
<sid text="VMTools">S-1-5-80-994229404-1081919929-268374983-1858992150-4232923339</sid>
<sid text="VMUpgradeHelper">S-1-5-80-3615470141-4057994987-1930054357-1444440834-2714780835</sid>
<sid text="vmvss">S-1-5-80-3972256235-858188783-2536722634-3029314587-3393749697</sid>
<sid text="volmgr">S-1-5-80-1570634675-3893565091-22195573-2267868061-2898682217</sid>
<sid text="volmgrx">S-1-5-80-2228288927-839465256-4097931996-4258784654-3424789253</sid>
<sid text="volsnap">S-1-5-80-2161309226-1540144261-2901834345-3792977468-1183436922</sid>
<sid text="vsmraid">S-1-5-80-1269120828-58111527-683397690-4062780901-3407528550</sid>
<sid text="VSS">S-1-5-80-3195062495-2862850656-3724129271-1847284719-4038691091</sid>
<sid text="vwifibus">S-1-5-80-4271242282-3170619077-2600330701-1558677754-1139114601</sid>
<sid text="W32Time">S-1-5-80-4267341169-2882910712-659946508-2704364837-2204554466</sid>
<sid text="W3SVC">S-1-5-80-989796750-4090848350-2040919084-978865222-2182970707</sid>
<sid text="WacomPen">S-1-5-80-1272828037-3321607953-1682131387-4084423848-3273467238</sid>
<sid text="WANARP">S-1-5-80-145391760-3682396335-1395736941-2543690743-1822485816</sid>
<sid text="Wanarpv6">S-1-5-80-3957613141-1606606214-622769385-3049525404-2510868034</sid>
<sid text="wbengine">S-1-5-80-1549550529-11381693-4027442525-4081535042-2424139505</sid>
<sid text="WbioSrvc">S-1-5-80-1577343513-2244782562-3500840712-2807016722-4230555396</sid>
<sid text="wcncsvc">S-1-5-80-1555863574-1012459212-3842453055-37978308-1142448422</sid>
<sid text="WcsPlugInService">S-1-5-80-4064017820-1559943312-846267769-2219870576-1957141527</sid>
<sid text="Wd">S-1-5-80-3405261312-3324525412-773550320-3159108954-1126011555</sid>
<sid text="Wdf01000">S-1-5-80-2731089040-2526960094-3333867314-868407530-1311763772</sid>
<sid text="WdiServiceHost">S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420</sid>
<sid text="WdiSystemHost">S-1-5-80-3524758515-3090971750-345616940-2322499744-3530715838</sid>
<sid text="WebClient">S-1-5-80-324959683-3395802011-921526492-919036580-1730255754</sid>
<sid text="Wecsvc">S-1-5-80-4059739203-877974739-1245631912-527174227-2996563517</sid>
<sid text="wercplsupport">S-1-5-80-3594706986-2537596223-181334840-1741483385-1351671666</sid>
<sid text="WerSvc">S-1-5-80-3299868208-4286319593-1091140620-3583751967-1732444380</sid>
<sid text="WfpLwf">S-1-5-80-2019001281-2253379323-945087313-3738653069-3773415333</sid>
<sid text="WIMMount">S-1-5-80-4016954646-3779912912-520790876-2627662839-2216516612</sid>
<sid text="win32dd">S-1-5-80-1367312344-4235937835-3348187091-2947416599-1643272376</sid>
<sid text="WinDefend">S-1-5-80-1913148863-3492339771-4165695881-2087618961-4109116736</sid>
<sid text="Windows Workflow Foundation 3.0.0.0">S-1-5-80-3760743496-293058752-544796799-945139227-648175845</sid>
<sid text="WinHttpAutoProxySvc">S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725</sid>
<sid text="Winmgmt">S-1-5-80-3750560858-172214265-3889451188-1914796615-4100997547</sid>
<sid text="WinRM">S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970</sid>
<sid text="Winsock">S-1-5-80-3758380775-581010763-2947690711-3499621892-3054972477</sid>
<sid text="WinSock2">S-1-5-80-197470898-1564017914-2276667423-138762734-2890991316</sid>
<sid text="Wlansvc">S-1-5-80-1428027539-3309602793-2678353003-1498846795-3763184142</sid>
<sid text="WmiAcpi">S-1-5-80-404760553-4074834012-3606039051-2170089041-3496108291</sid>
<sid text="WmiApRpl">S-1-5-80-1672893355-2301755825-1450106782-2724904875-1401714515</sid>
<sid text="wmiApSrv">S-1-5-80-1851371743-411767070-3743290205-1090512353-603110601</sid>
<sid text="WMPNetworkSvc">S-1-5-80-2375682873-768044350-3534595160-1005545032-2873800392</sid>
<sid text="WPCSvc">S-1-5-80-2153317275-3787551921-2333987345-3394040919-509713777</sid>
<sid text="WPDBusEnum">S-1-5-80-113310567-2163499630-2787090463-221477905-209227094</sid>
<sid text="ws2ifsl">S-1-5-80-1339864866-2803517768-580965624-1158720225-1206284216</sid>
<sid text="wscsvc">S-1-5-80-3232712927-1625117661-2590453128-1738570065-3637376297</sid>
<sid text="WSearch">S-1-5-80-117416528-2204451360-1913602512-1355018040-1234992034</sid>
<sid text="WSearchIdxPi">S-1-5-80-1961591210-2878639619-2091680054-2529124376-3572759234</sid>
<sid text="wuauserv">S-1-5-80-1014140700-3308905587-3330345912-272242898-93311788</sid>
<sid text="WudfPf">S-1-5-80-69171120-2364612362-2758615892-3595098197-2063739924</sid>
<sid text="WUDFRd">S-1-5-80-1839061227-813336325-324579571-4216704371-1399658985</sid>
<sid text="wudfsvc">S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709</sid>
<sid text="WwanSvc">S-1-5-80-3981856537-581775623-1136376035-2066872258-409572886</sid>
<sid text="xmlprov">S-1-5-80-2933569122-2468899862-1495779727-289297006-142656920</sid>
</sids>
</xml>