[reg]
Total=1

[cmd]
numSections=1
1=REGISTRY_BASED VERB_RESTORE_REG_VALUE OBJ_REG_VALUE 1
Total=2
2=REGISTRY_BASED VERB_RESTORE_REG_KEY OBJ_REG_METADATA 1

[1]
hive=HKLM
type=REG_SZ
redir=0
empty=-1
DateM=2024/06/18 07:33:41
SD=O:SYG:SYD:AI(A;ID;KR;;;BU)(A;CIIOID;GR;;;BU)(A;ID;KA;;;BA)(A;CIIOID;GA;;;BA)(A;ID;KA;;;SY)(A;CIIOID;GA;;;SY)(A;CIIOID;GA;;;CO)(A;ID;KR;;;AC)(A;CIIOID;GR;;;AC)(A;ID;KR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)(A;CIIOID;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)S:AI
key=SYSTEM\CurrentControlSet\Control\SafeBoot
param=AlternateShell
data=
dataDecoded=
hash=00000000