[reg] Total=69 [cmd] numSections=69 1=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 1 Total=77 2=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 2 3=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 3 4=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 4 5=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 5 6=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 6 7=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 7 8=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 8 9=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 9 10=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 10 11=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 11 12=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 12 13=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 13 14=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 14 15=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 15 16=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 16 17=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 17 18=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 18 19=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 19 20=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 20 21=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 21 22=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 22 23=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 23 24=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 24 25=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 25 26=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 26 27=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 27 28=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 28 29=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 29 30=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 30 31=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 31 32=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 32 33=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 33 34=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 34 35=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 35 36=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 36 37=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 37 38=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 38 39=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 39 40=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 40 41=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 41 42=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 42 43=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 43 44=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 44 45=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 45 46=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 46 47=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 47 48=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 48 49=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 49 50=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 50 51=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 51 52=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 52 53=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 53 54=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 54 55=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 55 56=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 56 57=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 57 58=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 58 59=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 59 60=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 60 61=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 61 62=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 62 63=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 63 64=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 64 65=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 65 66=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 66 67=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 67 68=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 68 69=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 69 70=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 1 71=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 11 72=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 19 73=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 30 74=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 41 75=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 50 76=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 60 77=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 69 [1] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:13 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param= data= dataDecoded= hash=00000000 [2] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=className data=\u0069\u0070\u0073\u0065\u0063\u0050\u006F\u006C\u0069\u0063\u0079 dataDecoded=ipsecPolicy hash=5CC7E8C4 [3] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=name data=\u0069\u0070\u0073\u0065\u0063\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0031\u0061\u0063\u0032\u0038\u0061\u0066\u002D\u0062\u0035\u0064\u0039\u002D\u0034\u0035\u0030\u0035\u002D\u0039\u0039\u0032\u0062\u002D\u0062\u0031\u0063\u0061\u0035\u0038\u0037\u0030\u0061\u0035\u0038\u0038\u007D dataDecoded=ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} hash=2B0CE50E [4] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=ipsecName data=\u0077\u0069\u006E dataDecoded=win hash=6973D634 [5] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=ipsecID data=\u007B\u0034\u0031\u0061\u0063\u0032\u0038\u0061\u0066\u002D\u0062\u0035\u0064\u0039\u002D\u0034\u0035\u0030\u0035\u002D\u0039\u0039\u0032\u0062\u002D\u0062\u0031\u0063\u0061\u0035\u0038\u0037\u0030\u0061\u0035\u0038\u0038\u007D dataDecoded={41ac28af-b5d9-4505-992b-b1ca5870a588} hash=680B93F7 [6] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [7] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=ipsecData data=632120224C4FD111863B00A0248D302104000000302A000000 dataDecoded=632120224C4FD111863B00A0248D302104000000302A000000 hash=D9B2C727 [8] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=ipsecISAKMPReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u0049\u0053\u0041\u004B\u004D\u0050\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0038\u0062\u0031\u0036\u0035\u0030\u0063\u002D\u0066\u0032\u0061\u0036\u002D\u0034\u0032\u0036\u0033\u002D\u0061\u0039\u0030\u0037\u002D\u0034\u0039\u0037\u0035\u0065\u0038\u0034\u0032\u0035\u0066\u0037\u0034\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} hash=57F4AC28 [9] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=whenChanged data=1718701933 dataDecoded=1718701933 hash=6CC85ED3 [10] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} param=ipsecNFAReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0030\u0039\u0065\u0037\u0031\u0034\u0034\u0034\u002D\u0064\u0032\u0065\u0035\u002D\u0034\u0062\u0038\u0036\u002D\u0039\u0061\u0062\u0036\u002D\u0032\u0063\u0034\u0064\u0061\u0034\u0066\u0063\u0033\u0034\u0034\u0065\u007D\u0000\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0033\u0034\u0063\u0065\u0066\u0037\u0063\u0034\u002D\u0039\u0031\u0039\u0066\u002D\u0034\u0061\u0032\u0038\u002D\u0038\u0063\u0036\u0033\u002D\u0065\u0035\u0063\u0061\u0034\u0032\u0066\u0065\u0035\u0063\u0031\u0065\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e}SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} hash=825C3461 [11] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:13 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param= data= dataDecoded= hash=00000000 [12] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=className data=\u0069\u0070\u0073\u0065\u0063\u0049\u0053\u0041\u004B\u004D\u0050\u0050\u006F\u006C\u0069\u0063\u0079 dataDecoded=ipsecISAKMPPolicy hash=5B6AB5EE [13] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=name data=\u0069\u0070\u0073\u0065\u0063\u0049\u0053\u0041\u004B\u004D\u0050\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0038\u0062\u0031\u0036\u0035\u0030\u0063\u002D\u0066\u0032\u0061\u0036\u002D\u0034\u0032\u0036\u0033\u002D\u0061\u0039\u0030\u0037\u002D\u0034\u0039\u0037\u0035\u0065\u0038\u0034\u0032\u0035\u0066\u0037\u0034\u007D dataDecoded=ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} hash=353D780D [14] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=ipsecID data=\u007B\u0034\u0038\u0062\u0031\u0036\u0035\u0030\u0063\u002D\u0066\u0032\u0061\u0036\u002D\u0034\u0032\u0036\u0033\u002D\u0061\u0039\u0030\u0037\u002D\u0034\u0039\u0037\u0035\u0065\u0038\u0034\u0032\u0035\u0066\u0037\u0034\u007D dataDecoded={48b1650c-f2a6-4263-a907-4975e8425f74} hash=3006EF15 [15] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [16] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=ipsecData data=B820DC80C82ED111A89E00A0248D3021C00000000C65B148A6F26342A9074975E8425F74000000000000000000000000000000000000000080700000000000000000000000000000000000000000000002000000000000000300000040000000080000000200000040000000000000000000000000000000000000000000000002000000000000000000000080700000000000000000000003000000400000000800000002000000400000000000000000000000000000000400000000000000020000000000000000000000807000000000000000 dataDecoded=B820DC80C82ED111A89E00A0248D3021C00000000C65B148A6F26342A9074975E8425F74000000000000000000000000000000000000000080700000000000000000000000000000000000000000000002000000000000000300000040000000080000000200000040000000000000000000000000000000000000000000000002000000000000000000000080700000000000000000000003000000400000000800000002000000400000000000000000000000000000000400000000000000020000000000000000000000807000000000000000 hash=EE579FE0 [17] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=whenChanged data=1718701932 dataDecoded=1718701932 hash=1BCF6E45 [18] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecISAKMPPolicy{48b1650c-f2a6-4263-a907-4975e8425f74} param=ipsecOwnersReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0031\u0061\u0063\u0032\u0038\u0061\u0066\u002D\u0062\u0035\u0064\u0039\u002D\u0034\u0035\u0030\u0035\u002D\u0039\u0039\u0032\u0062\u002D\u0062\u0031\u0063\u0061\u0035\u0038\u0037\u0030\u0061\u0035\u0038\u0038\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} hash=B8640FFC [19] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:13 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param= data= dataDecoded= hash=00000000 [20] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=className data=\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041 dataDecoded=ipsecNFA hash=09DD6893 [21] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=name data=\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0030\u0039\u0065\u0037\u0031\u0034\u0034\u0034\u002D\u0064\u0032\u0065\u0035\u002D\u0034\u0062\u0038\u0036\u002D\u0039\u0061\u0062\u0036\u002D\u0032\u0063\u0034\u0064\u0061\u0034\u0066\u0063\u0033\u0034\u0034\u0065\u007D dataDecoded=ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} hash=E13CA3E1 [22] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecName data=\u0064\u0065\u006E\u0079\u0031 dataDecoded=deny1 hash=2D292E10 [23] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecID data=\u007B\u0030\u0039\u0065\u0037\u0031\u0034\u0034\u0034\u002D\u0064\u0032\u0065\u0035\u002D\u0034\u0062\u0038\u0036\u002D\u0039\u0061\u0062\u0036\u002D\u0032\u0063\u0034\u0064\u0061\u0034\u0066\u0063\u0033\u0034\u0034\u0065\u007D dataDecoded={09e71444-d2e5-4b86-9ab6-2c4da4fc344e} hash=F05A4603 [24] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [25] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecData data=00ACBB118D49D111863900A0248D30212A0000000100000005000000020000000000FDFFFFFF0200000000000000000000000000010000000200000000000101010101010101010101010101010101000000050000000000000001010101010101010101010101010102010000000000000000 dataDecoded=00ACBB118D49D111863900A0248D30212A0000000100000005000000020000000000FDFFFFFF0200000000000000000000000000010000000200000000000101010101010101010101010101010101000000050000000000000001010101010101010101010101010102010000000000000000 hash=898F985D [26] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecNegotiationPolicyReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0065\u0067\u006F\u0074\u0069\u0061\u0074\u0069\u006F\u006E\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0036\u0031\u0032\u0065\u0030\u0034\u0035\u0035\u002D\u0065\u0038\u0062\u0030\u002D\u0034\u0035\u0063\u0031\u002D\u0038\u0032\u0063\u0061\u002D\u0035\u0038\u0065\u0061\u0031\u0039\u0061\u0036\u0033\u0031\u0062\u0039\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} hash=6884D99B [27] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecFilterReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u0046\u0069\u006C\u0074\u0065\u0072\u007B\u0061\u0031\u0064\u0065\u0064\u0033\u0030\u0063\u002D\u0033\u0063\u0062\u0064\u002D\u0034\u0037\u0038\u0064\u002D\u0062\u0038\u0030\u0033\u002D\u0037\u0037\u0063\u0036\u0061\u0039\u0036\u0065\u0065\u0066\u0065\u0031\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} hash=D2453893 [28] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=whenChanged data=1718701933 dataDecoded=1718701933 hash=6CC85ED3 [29] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} param=ipsecOwnersReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0031\u0061\u0063\u0032\u0038\u0061\u0066\u002D\u0062\u0035\u0064\u0039\u002D\u0034\u0035\u0030\u0035\u002D\u0039\u0039\u0032\u0062\u002D\u0062\u0031\u0063\u0061\u0035\u0038\u0037\u0030\u0061\u0035\u0038\u0038\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} hash=B8640FFC [30] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:13 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param= data= dataDecoded= hash=00000000 [31] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=className data=\u0069\u0070\u0073\u0065\u0063\u004E\u0065\u0067\u006F\u0074\u0069\u0061\u0074\u0069\u006F\u006E\u0050\u006F\u006C\u0069\u0063\u0079 dataDecoded=ipsecNegotiationPolicy hash=2394AC7F [32] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=name data=\u0069\u0070\u0073\u0065\u0063\u004E\u0065\u0067\u006F\u0074\u0069\u0061\u0074\u0069\u006F\u006E\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0036\u0031\u0032\u0065\u0030\u0034\u0035\u0035\u002D\u0065\u0038\u0062\u0030\u002D\u0034\u0035\u0063\u0031\u002D\u0038\u0032\u0063\u0061\u002D\u0035\u0038\u0065\u0061\u0031\u0039\u0061\u0036\u0033\u0031\u0062\u0039\u007D dataDecoded=ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} hash=76037512 [33] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecName data=\u0064\u0065\u006E\u0079 dataDecoded=deny hash=1BA70716 [34] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecID data=\u007B\u0036\u0031\u0032\u0065\u0030\u0034\u0035\u0035\u002D\u0065\u0038\u0062\u0030\u002D\u0034\u0035\u0063\u0031\u002D\u0038\u0032\u0063\u0061\u002D\u0035\u0038\u0065\u0061\u0031\u0039\u0061\u0036\u0033\u0031\u0062\u0039\u007D dataDecoded={612e0455-e8b0-45c1-82ca-58ea19a631b9} hash=2909EAEC [35] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecNegotiationPolicyAction data=\u007B\u0033\u0066\u0039\u0031\u0061\u0038\u0031\u0039\u002D\u0037\u0036\u0034\u0037\u002D\u0031\u0031\u0064\u0031\u002D\u0038\u0036\u0034\u0064\u002D\u0064\u0034\u0036\u0061\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u007D dataDecoded={3f91a819-7647-11d1-864d-d46a00000000} hash=D9F75E7B [36] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecNegotiationPolicyType data=\u007B\u0036\u0032\u0066\u0034\u0039\u0065\u0031\u0030\u002D\u0036\u0063\u0033\u0037\u002D\u0031\u0031\u0064\u0031\u002D\u0038\u0036\u0034\u0063\u002D\u0031\u0034\u0061\u0033\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u007D dataDecoded={62f49e10-6c37-11d1-864c-14a300000000} hash=96B325AC [37] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [38] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecData data=B920DC80C82ED111A89E00A0248D3021040000000000000000 dataDecoded=B920DC80C82ED111A89E00A0248D3021040000000000000000 hash=6CDA3712 [39] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=whenChanged data=1718701933 dataDecoded=1718701933 hash=6CC85ED3 [40] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{612e0455-e8b0-45c1-82ca-58ea19a631b9} param=ipsecOwnersReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0030\u0039\u0065\u0037\u0031\u0034\u0034\u0034\u002D\u0064\u0032\u0065\u0035\u002D\u0034\u0062\u0038\u0036\u002D\u0039\u0061\u0062\u0036\u002D\u0032\u0063\u0034\u0064\u0061\u0034\u0066\u0063\u0033\u0034\u0034\u0065\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} hash=FC4E201A [41] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:12 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param= data= dataDecoded= hash=00000000 [42] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=className data=\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041 dataDecoded=ipsecNFA hash=09DD6893 [43] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=name data=\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0033\u0034\u0063\u0065\u0066\u0037\u0063\u0034\u002D\u0039\u0031\u0039\u0066\u002D\u0034\u0061\u0032\u0038\u002D\u0038\u0063\u0036\u0033\u002D\u0065\u0035\u0063\u0061\u0034\u0032\u0066\u0065\u0035\u0063\u0031\u0065\u007D dataDecoded=ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} hash=2C98BF42 [44] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=ipsecID data=\u007B\u0033\u0034\u0063\u0065\u0066\u0037\u0063\u0034\u002D\u0039\u0031\u0039\u0066\u002D\u0034\u0061\u0032\u0038\u002D\u0038\u0063\u0036\u0033\u002D\u0065\u0035\u0063\u0061\u0034\u0032\u0066\u0065\u0035\u0063\u0031\u0065\u007D dataDecoded={34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} hash=3DFE5AA0 [45] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [46] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=ipsecData data=00ACBB118D49D111863900A0248D30212A0000000100000005000000020000000000FDFFFFFF0200000000000000000000000000000000000200000000000101010101010101010101010101010101000000050000000000000001010101010101010101010101010102010000000000000000 dataDecoded=00ACBB118D49D111863900A0248D30212A0000000100000005000000020000000000FDFFFFFF0200000000000000000000000000000000000200000000000101010101010101010101010101010101000000050000000000000001010101010101010101010101010102010000000000000000 hash=099EF96C [47] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=ipsecNegotiationPolicyReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0065\u0067\u006F\u0074\u0069\u0061\u0074\u0069\u006F\u006E\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0038\u0039\u0031\u0064\u0035\u0038\u0036\u002D\u0030\u0064\u0036\u0036\u002D\u0034\u0062\u0031\u0035\u002D\u0039\u0066\u0037\u0039\u002D\u0038\u0032\u0032\u0065\u0032\u0034\u0063\u0030\u0036\u0038\u0063\u0066\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} hash=00925325 [48] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=whenChanged data=1718701933 dataDecoded=1718701933 hash=6CC85ED3 [49] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} param=ipsecOwnersReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0031\u0061\u0063\u0032\u0038\u0061\u0066\u002D\u0062\u0035\u0064\u0039\u002D\u0034\u0035\u0030\u0035\u002D\u0039\u0039\u0032\u0062\u002D\u0062\u0031\u0063\u0061\u0035\u0038\u0037\u0030\u0061\u0035\u0038\u0038\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} hash=B8640FFC [50] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:12 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param= data= dataDecoded= hash=00000000 [51] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=className data=\u0069\u0070\u0073\u0065\u0063\u004E\u0065\u0067\u006F\u0074\u0069\u0061\u0074\u0069\u006F\u006E\u0050\u006F\u006C\u0069\u0063\u0079 dataDecoded=ipsecNegotiationPolicy hash=2394AC7F [52] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=name data=\u0069\u0070\u0073\u0065\u0063\u004E\u0065\u0067\u006F\u0074\u0069\u0061\u0074\u0069\u006F\u006E\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0038\u0039\u0031\u0064\u0035\u0038\u0036\u002D\u0030\u0064\u0036\u0036\u002D\u0034\u0062\u0031\u0035\u002D\u0039\u0066\u0037\u0039\u002D\u0038\u0032\u0032\u0065\u0032\u0034\u0063\u0030\u0036\u0038\u0063\u0066\u007D dataDecoded=ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} hash=1E15FFAC [53] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=ipsecID data=\u007B\u0034\u0038\u0039\u0031\u0064\u0035\u0038\u0036\u002D\u0030\u0064\u0036\u0036\u002D\u0034\u0062\u0031\u0035\u002D\u0039\u0066\u0037\u0039\u002D\u0038\u0032\u0032\u0065\u0032\u0034\u0063\u0030\u0036\u0038\u0063\u0066\u007D dataDecoded={4891d586-0d66-4b15-9f79-822e24c068cf} hash=411F6052 [54] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=ipsecNegotiationPolicyAction data=\u007B\u0038\u0061\u0031\u0037\u0031\u0064\u0064\u0033\u002D\u0037\u0037\u0065\u0033\u002D\u0031\u0031\u0064\u0031\u002D\u0038\u0036\u0035\u0039\u002D\u0061\u0030\u0034\u0066\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u007D dataDecoded={8a171dd3-77e3-11d1-8659-a04f00000000} hash=1E1451C5 [55] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=ipsecNegotiationPolicyType data=\u007B\u0036\u0032\u0066\u0034\u0039\u0065\u0031\u0033\u002D\u0036\u0063\u0033\u0037\u002D\u0031\u0031\u0064\u0031\u002D\u0038\u0036\u0034\u0063\u002D\u0031\u0034\u0061\u0033\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u0030\u007D dataDecoded={62f49e13-6c37-11d1-864c-14a300000000} hash=B402EEAE [56] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [57] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=ipsecData data=B920DC80C82ED111A89E00A0248D3021A4000000020000000000000000000000000000000000000001000000030000000200000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 dataDecoded=B920DC80C82ED111A89E00A0248D3021A4000000020000000000000000000000000000000000000001000000030000000200000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 hash=0E70B3AB [58] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=whenChanged data=1718701933 dataDecoded=1718701933 hash=6CC85ED3 [59] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecNegotiationPolicy{4891d586-0d66-4b15-9f79-822e24c068cf} param=ipsecOwnersReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0033\u0034\u0063\u0065\u0066\u0037\u0063\u0034\u002D\u0039\u0031\u0039\u0066\u002D\u0034\u0061\u0032\u0038\u002D\u0038\u0063\u0036\u0033\u002D\u0065\u0035\u0063\u0061\u0034\u0032\u0066\u0065\u0035\u0063\u0031\u0065\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNFA{34cef7c4-919f-4a28-8c63-e5ca42fe5c1e} hash=31EA3CB9 [60] hive=HKLM type=REG_SZ redir=0 empty=-1 DateM=2024/06/18 02:12:13 SD=O:SYG:SYD:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param= data= dataDecoded= hash=00000000 [61] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=className data=\u0069\u0070\u0073\u0065\u0063\u0046\u0069\u006C\u0074\u0065\u0072 dataDecoded=ipsecFilter hash=14236F66 [62] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=name data=\u0069\u0070\u0073\u0065\u0063\u0046\u0069\u006C\u0074\u0065\u0072\u007B\u0061\u0031\u0064\u0065\u0064\u0033\u0030\u0063\u002D\u0033\u0063\u0062\u0064\u002D\u0034\u0037\u0038\u0064\u002D\u0062\u0038\u0030\u0033\u002D\u0037\u0037\u0063\u0036\u0061\u0039\u0036\u0065\u0065\u0066\u0065\u0031\u007D dataDecoded=ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} hash=412DD261 [63] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=ipsecName data=\u0064\u0065\u006E\u0079\u006C\u0069\u0073\u0074 dataDecoded=denylist hash=8002CC54 [64] hive=HKLM type=REG_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=ipsecID data=\u007B\u0061\u0031\u0064\u0065\u0064\u0033\u0030\u0063\u002D\u0033\u0063\u0062\u0064\u002D\u0034\u0037\u0038\u0064\u002D\u0062\u0038\u0030\u0033\u002D\u0037\u0037\u0063\u0036\u0061\u0039\u0036\u0065\u0065\u0066\u0065\u0031\u007D dataDecoded={a1ded30c-3cbd-478d-b803-77c6a96eefe1} hash=E58D0F2A [65] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=ipsecDataType data=256 dataDecoded=256 hash=B525BFC3 [66] hive=HKLM type=REG_BINARY redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=ipsecData data=B520DC80C82ED111A89E00A0248D30217C01000005000000020000000000020000000000080000006E006F0074000000333C18168638A34CB2FFFD894C7B388F01000000000000000000000000000000FFFFFFFF00000000060000000000870000000000020000000000020000000000080000006E006F00740000003AB8924A5DAFE34A82B85CCB8339EC4001000000000000000000000000000000FFFFFFFF00000000060000000000890000000000020000000000020000000000080000006E006F0074000000225C378336EC3746919E8DDA1F009D4101000000000000000000000000000000FFFFFFFF000000000600000000008A0000000000020000000000020000000000080000006E006F007400000057A0CE7487CDC9449E4F0CA91982E82901000000000000000000000000000000FFFFFFFF000000000600000000008B0000000000020000000000020000000000080000006E006F007400000041CE2B695472564084A48FE0D3E05D9A01000000000000000000000000000000FFFFFFFF00000000060000000000BD0100000000 dataDecoded=B520DC80C82ED111A89E00A0248D30217C01000005000000020000000000020000000000080000006E006F0074000000333C18168638A34CB2FFFD894C7B388F01000000000000000000000000000000FFFFFFFF00000000060000000000870000000000020000000000020000000000080000006E006F00740000003AB8924A5DAFE34A82B85CCB8339EC4001000000000000000000000000000000FFFFFFFF00000000060000000000890000000000020000000000020000000000080000006E006F0074000000225C378336EC3746919E8DDA1F009D4101000000000000000000000000000000FFFFFFFF000000000600000000008A0000000000020000000000020000000000080000006E006F007400000057A0CE7487CDC9449E4F0CA91982E82901000000000000000000000000000000FFFFFFFF000000000600000000008B0000000000020000000000020000000000080000006E006F007400000041CE2B695472564084A48FE0D3E05D9A01000000000000000000000000000000FFFFFFFF00000000060000000000BD0100000000 hash=B48D52B6 [67] hive=HKLM type=REG_DWORD redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=whenChanged data=1718701934 dataDecoded=1718701934 hash=F2ACCB70 [68] hive=HKLM type=REG_MULTI_SZ redir=0 empty=0 key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local\ipsecFilter{a1ded30c-3cbd-478d-b803-77c6a96eefe1} param=ipsecOwnersReference data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u004E\u0046\u0041\u007B\u0030\u0039\u0065\u0037\u0031\u0034\u0034\u0034\u002D\u0064\u0032\u0065\u0035\u002D\u0034\u0062\u0038\u0036\u002D\u0039\u0061\u0062\u0036\u002D\u0032\u0063\u0034\u0064\u0061\u0034\u0066\u0063\u0033\u0034\u0034\u0065\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecNFA{09e71444-d2e5-4b86-9ab6-2c4da4fc344e} hash=FC4E201A [69] hive=HKLM type=REG_SZ redir=0 empty=0 DateM=2024/06/18 02:12:13 SD=O:BAG:S-1-5-21-3339660976-4175652973-1130352044-513D:AI(A;CIID;KA;;;SY)(A;CIID;KA;;;BA)(A;CIID;KR;;;S-1-5-80-3044542841-3639452079-4096941652-1606687743-1256249853) key=SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local param=ActivePolicy data=\u0053\u004F\u0046\u0054\u0057\u0041\u0052\u0045\u005C\u0050\u006F\u006C\u0069\u0063\u0069\u0065\u0073\u005C\u004D\u0069\u0063\u0072\u006F\u0073\u006F\u0066\u0074\u005C\u0057\u0069\u006E\u0064\u006F\u0077\u0073\u005C\u0049\u0050\u0053\u0045\u0043\u005C\u0050\u006F\u006C\u0069\u0063\u0079\u005C\u004C\u006F\u0063\u0061\u006C\u005C\u0069\u0070\u0073\u0065\u0063\u0050\u006F\u006C\u0069\u0063\u0079\u007B\u0034\u0031\u0061\u0063\u0032\u0038\u0061\u0066\u002D\u0062\u0035\u0064\u0039\u002D\u0034\u0035\u0030\u0035\u002D\u0039\u0039\u0032\u0062\u002D\u0062\u0031\u0063\u0061\u0035\u0038\u0037\u0030\u0061\u0035\u0038\u0038\u007D dataDecoded=SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{41ac28af-b5d9-4505-992b-b1ca5870a588} hash=B8640FFC