802304000x1000000000000000689Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001430837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000688Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001430837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000687Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000686Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000685Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430816Microsoft.People116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PEOPLE\APPX\10.2202.33.00 802304000x1000000000000000684Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430816Microsoft.People116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PEOPLE\APPX\10.2202.33.00 802304000x1000000000000000683Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430816Microsoft.People118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PEOPLE\APPX\2021.2202.33.00 802304000x1000000000000000682Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430833Microsoft.XboxSpeechToTextOverlay133CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXSPEECHTOTEXTOVERLAY\APPX\1.21.13002.00 802304000x1000000000000000681Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430833Microsoft.XboxSpeechToTextOverlay133CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXSPEECHTOTEXTOVERLAY\APPX\1.21.13002.00 802304000x1000000000000000680Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430833Microsoft.XboxSpeechToTextOverlay133CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXSPEECHTOTEXTOVERLAY\APPX\1.21.13002.00 802304000x1000000000000000679Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430825Microsoft.XboxGameOverlay124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMEOVERLAY\APPX\1.54.4001.00 802304000x1000000000000000678Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430825Microsoft.XboxGameOverlay124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMEOVERLAY\APPX\1.54.4001.00 802304000x1000000000000000677Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181430825Microsoft.XboxGameOverlay124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMEOVERLAY\APPX\1.54.4001.00 802304000x1000000000000000676Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000675Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000674Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772825Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1200.442.00 802304000x1000000000000000673Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772825Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1200.442.00 802304000x1000000000000000672Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772825Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1201.442.00 802304000x1000000000000000671Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772825Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1200.442.00 802304000x1000000000000000670Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772825Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1200.442.00 802304000x1000000000000000669Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772825Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1201.442.00 802304000x1000000000000000668Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000667Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772837MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.310.00 802304000x1000000000000000666Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772835microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21854.00 802304000x1000000000000000665Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772835microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21854.00 802304000x1000000000000000664Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772828MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.88.00 802304000x1000000000000000663Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772828MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.88.00 802304000x1000000000000000662Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772828MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.88.00 802304000x1000000000000000661Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772828Microsoft.WebMediaExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WEBMEDIAEXTENSIONS\APPX\1.1.663.00 802304000x1000000000000000660Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772828Microsoft.WebMediaExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WEBMEDIAEXTENSIONS\APPX\1.1.663.00 802304000x1000000000000000659Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772828Microsoft.WebMediaExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WEBMEDIAEXTENSIONS\APPX\1.1.663.00 802304000x1000000000000000658Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772828Microsoft.WebMediaExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WEBMEDIAEXTENSIONS\APPX\1.1.663.00 802304000x1000000000000000657Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772828MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.88.00 802304000x1000000000000000656Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772828MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.88.00 802304000x1000000000000000655Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772828MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.88.00 802304000x1000000000000000654Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772835microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21854.00 802304000x1000000000000000653Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772835microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21854.00 802304000x1000000000000000652Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772827Microsoft.RawImageExtension124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.RAWIMAGEEXTENSION\APPX\2.3.611.00 802304000x1000000000000000651Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500772827Microsoft.RawImageExtension124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.RAWIMAGEEXTENSION\APPX\2.3.611.00 802304000x1000000000000000650Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772827Microsoft.RawImageExtension124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.RAWIMAGEEXTENSION\APPX\2.3.611.00 802304000x1000000000000000649Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18772827Microsoft.RawImageExtension124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.RAWIMAGEEXTENSION\APPX\2.3.611.00 800504000x4000000000000000900Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500995671%WINDIR%\TEMP\SDIAG_3C4C97F9-5738-4AB9-88D1-D27D0EFCCBE5\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x526eb1f73C:\Windows\TEMP\SDIAG_3c4c97f9-5738-4ab9-88d1-d27d0efccbe5\CL_Utility.ps1 800504000x4000000000000000899Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500995681%WINDIR%\TEMP\SDIAG_3C4C97F9-5738-4AB9-88D1-D27D0EFCCBE5\TS_DIAGNOSTICHISTORY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x526eb1f83C:\Windows\TEMP\SDIAG_3c4c97f9-5738-4ab9-88d1-d27d0efccbe5\TS_DiagnosticHistory.ps1 800504000x4000000000000000898Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500995671%WINDIR%\TEMP\SDIAG_3C4C97F9-5738-4AB9-88D1-D27D0EFCCBE5\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x526eb1f73C:\Windows\TEMP\SDIAG_3c4c97f9-5738-4ab9-88d1-d27d0efccbe5\CL_Utility.ps1 800504000x4000000000000000897Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500995672%WINDIR%\TEMP\SDIAG_3C4C97F9-5738-4AB9-88D1-D27D0EFCCBE5\TS_WERQUEUE.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x526eb1f74C:\Windows\TEMP\SDIAG_3c4c97f9-5738-4ab9-88d1-d27d0efccbe5\TS_WERQueue.ps1 800504000x4000000000000000896Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_AMTXDDWN.EJD.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_amtxddwn.ejd.ps1 800504000x4000000000000000895Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001638081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_VT5LBQ5S.C15.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_vt5lbq5s.c15.ps1 802304000x1000000000000000648Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500705225Microsoft.WDAC.WDACWizard120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WDAC.WDACWIZARD\APPX\2.4.2.00 800504000x4000000000000000894Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001091681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_PLZZ413G.LBN.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_plzz413g.lbn.ps1 800504000x4000000000000000893Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001444081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_ICGBG2QE.RGQ.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_icgbg2qe.rgq.ps1 800702000x4000000000000000892Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373224%OSDRIVE%\TEMP\HELLO.PS101-0x76cd49d17C:\temp\hello.ps1 800702000x4000000000000000891Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373224%OSDRIVE%\TEMP\HELLO.PS101-0x76cd49d17C:\temp\hello.ps1 800504000x4000000000000000890Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000889Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800702000x4000000000000000888Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373226%OSDRIVE%\TEMP\TESTCLM.PS101-0x76cd49d19C:\temp\testclm.ps1 800702000x4000000000000000887Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373226%OSDRIVE%\TEMP\TESTCLM.PS101-0x76cd49d19C:\temp\testclm.ps1 800504000x4000000000000000886Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000885Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800702000x4000000000000000884Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373223%OSDRIVE%\TEMP\TEST.PS101-0x76cd49d16C:\temp\test.ps1 800702000x4000000000000000883Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373223%OSDRIVE%\TEMP\TEST.PS101-0x76cd49d16C:\temp\test.ps1 800504000x4000000000000000882Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000881Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000880Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373217%WINDIR%\TEST.PS101-0x76cd49d19C:\Windows\test.ps1 800504000x4000000000000000879Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373217%WINDIR%\TEST.PS101-0x76cd49d19C:\Windows\test.ps1 800702000x4000000000000000878Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000943623%OSDRIVE%\TEMP\TEST.VBS01-0x76cd49d16C:\temp\test.vbs 800702000x4000000000000000877Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001334423%OSDRIVE%\TEMP\TEST.VBE01-0x76cd49d16C:\temp\test.vbe 800702000x4000000000000000876Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373223%OSDRIVE%\TEMP\TEST.PS101-0x76cd49d16C:\temp\test.ps1 800702000x4000000000000000875Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373223%OSDRIVE%\TEMP\TEST.PS101-0x76cd49d16C:\temp\test.ps1 800702000x4000000000000000874Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001136023%OSDRIVE%\TEMP\TEST.BAT01-0x76cd49d16C:\temp\test.bat 800702000x4000000000000000873Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373224%OSDRIVE%\TEMP\HELLO.PS101-0x76cd49d17C:\temp\hello.ps1 800702000x4000000000000000872Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373224%OSDRIVE%\TEMP\HELLO.PS101-0x76cd49d17C:\temp\hello.ps1 800504000x4000000000000000871Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000870Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000869Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500464481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_KUKUYSFK.LUF.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_kukuysfk.luf.ps1 800504000x4000000000000000868Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001528481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_USS3M4SU.MUP.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_uss3m4su.mup.ps1 800504000x4000000000000000867Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001414081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_NSXVFGBY.QSQ.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_nsxvfgby.qsq.ps1 800504000x4000000000000000866Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500882481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_24U5EGXX.BHF.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_24u5egxx.bhf.ps1 800504000x4000000000000000865Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500907281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_CXPLVW3S.1VD.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_cxplvw3s.1vd.ps1 800504000x4000000000000000864Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001434881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_ZUKRYUPB.G23.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_zukryupb.g23.ps1 800504000x4000000000000000863Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001627281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_BJXNNS2R.SMR.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_bjxnns2r.smr.ps1 800504000x4000000000000000862Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001085681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_SPX3EVNO.YQQ.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_spx3evno.yqq.ps1 800504000x4000000000000000861Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001086081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_BDSRUBDJ.ZJ4.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_bdsrubdj.zj4.ps1 800504000x4000000000000000860Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500863281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_TKDX4ZJ0.AWU.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_tkdx4zj0.awu.ps1 800702000x4000000000000000859Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001486057%OSDRIVE%\ATOMICREDTEAM\ATOMICS\T1059.007\SRC\SYS_INFO.JS01-0x76cd49d50C:\AtomicRedTeam\atomics\T1059.007\src\sys_info.js 800504000x4000000000000000858Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001545650%SYSTEM32%\PRINTING_ADMIN_SCRIPTS\EN-US\PUBPRN.VBS065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d59C:\Windows\System32\Printing_Admin_Scripts\en-US\pubprn.vbs 800504000x4000000000000000857Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000856Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800702000x4000000000000000855Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373270%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\INVOKE-ATOMICREDTEAM.PSD101-0x76cd49d63C:\AtomicRedTeam\invoke-atomicredteam\Invoke-AtomicRedTeam.psd1 800702000x4000000000000000854Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373270%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\INVOKE-ATOMICREDTEAM.PSD101-0x76cd49d63C:\AtomicRedTeam\invoke-atomicredteam\Invoke-AtomicRedTeam.psd1 800504000x4000000000000000853Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000852Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000851Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000850Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000849Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000848Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000847Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000846Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000845Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000844Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000843Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000842Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000841Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000840Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000839Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000838Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800702000x4000000000000000837Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373277%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_MZV3OUPQ.2JZ.PSM101-0x76cd49d70C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_mzv3oupq.2jz.psm1 800702000x4000000000000000836Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373276%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_F25CNUVU.OCI.PS101-0x76cd49d69C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_f25cnuvu.oci.ps1 800504000x4000000000000000835Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373243%PROGRAMFILES%\AUTOIT3\AUTOITX\AUTOITX.PSD1054O=AUTOIT CONSULTING LTD, L=BIRMINGHAM, C=GB\\\0.0.0.000x76cd49d51C:\Program Files (x86)\AutoIt3\AutoItX\AutoItX.psd1 800504000x4000000000000000834Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373243%PROGRAMFILES%\AUTOIT3\AUTOITX\AUTOITX.PSD1054O=AUTOIT CONSULTING LTD, L=BIRMINGHAM, C=GB\\\0.0.0.000x76cd49d51C:\Program Files (x86)\AutoIt3\AutoItX\AutoItX.psd1 800504000x4000000000000000833Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373298%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDERPERFORMANCE\CONFIGDEFENDERPERFORMANCE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d107C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\ConfigDefenderPerformance.psd1 800504000x4000000000000000832Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373298%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDERPERFORMANCE\CONFIGDEFENDERPERFORMANCE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d107C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\ConfigDefenderPerformance.psd1 800504000x4000000000000000831Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373278%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPROLLBACK.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d87C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpRollback.cdxml 800504000x4000000000000000830Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373278%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPROLLBACK.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d87C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpRollback.cdxml 800504000x4000000000000000829Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373277%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPWDOSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d86C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpWDOScan.cdxml 800504000x4000000000000000828Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373277%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPWDOSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d86C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpWDOScan.cdxml 800504000x4000000000000000827Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373279%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSIGNATURE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d88C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpSignature.cdxml 800504000x4000000000000000826Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373279%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSIGNATURE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d88C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpSignature.cdxml 800504000x4000000000000000825Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373274%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d83C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpScan.cdxml 800504000x4000000000000000824Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373274%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d83C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpScan.cdxml 800504000x4000000000000000823Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373285%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATDETECTION.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d94C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatDetection.cdxml 800504000x4000000000000000822Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373285%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATDETECTION.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d94C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatDetection.cdxml 800504000x4000000000000000821Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATCATALOG.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d92C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatCatalog.cdxml 800504000x4000000000000000820Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATCATALOG.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d92C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatCatalog.cdxml 800504000x4000000000000000819Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREAT.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d85C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreat.cdxml 800504000x4000000000000000818Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREAT.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d85C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreat.cdxml 800504000x4000000000000000817Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373280%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPPREFERENCE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d89C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpPreference.cdxml 800504000x4000000000000000816Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373280%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPPREFERENCE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d89C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpPreference.cdxml 800504000x4000000000000000815Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373284%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPCOMPUTERSTATUS.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d93C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpComputerStatus.cdxml 800504000x4000000000000000814Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373284%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPCOMPUTERSTATUS.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d93C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpComputerStatus.cdxml 800504000x4000000000000000813Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\CONFIGDEFENDER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d85C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\ConfigDefender.psd1 800504000x4000000000000000812Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\CONFIGDEFENDER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d85C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\ConfigDefender.psd1 800504000x4000000000000000811Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000810Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800702000x4000000000000000809Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001051623%OSDRIVE%\TEMP\TEST.BAT01-0x76cd49d16C:\temp\test.bat 800504000x4000000000000000808Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100013732104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000807Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100013732104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000806Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100013732104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000805Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100013732104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000804Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000803Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000802Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000801Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373283%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSD101-0x76cd49d85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psd1 800504000x4000000000000000800Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\LOLBASLINE\1.0.0\LOLBASLINE.PSD101-0x76cd49d75C:\Program Files\WindowsPowerShell\Modules\LOLBASline\1.0.0\LOLBASline.psd1 800504000x4000000000000000799Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\LOLBASLINE\1.0.0\LOLBASLINE.PSD101-0x76cd49d75C:\Program Files\WindowsPowerShell\Modules\LOLBASline\1.0.0\LOLBASline.psd1 800504000x4000000000000000798Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373281%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELLGET\1.0.0.1\POWERSHELLGET.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d89C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1 800504000x4000000000000000797Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373281%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELLGET\1.0.0.1\POWERSHELLGET.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d89C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1 800504000x4000000000000000796Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373265%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PESTER\3.4.0\PESTER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d73C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1 800504000x4000000000000000795Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373265%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PESTER\3.4.0\PESTER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d73C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1 800702000x4000000000000000794Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373224%OSDRIVE%\TEMP\HELLO.PS101-0x76cd49d17C:\temp\hello.ps1 800702000x4000000000000000793Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373224%OSDRIVE%\TEMP\HELLO.PS101-0x76cd49d17C:\temp\hello.ps1 800504000x4000000000000000792Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100013732110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000791Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100013732110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000790Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d75C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000789Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d75C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000788Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373282%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d84C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000787Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373282%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d84C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000786Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d75C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800504000x4000000000000000785Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-10001373273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x76cd49d75C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800702000x4000000000000000784Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373277%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_3LIEH0AE.Z1I.PSM101-0x76cd49d70C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_3lieh0ae.z1i.psm1 800702000x4000000000000000783Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001373276%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_U53J4SJ5.LEY.PS101-0x76cd49d69C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_u53j4sj5.ley.ps1 800504000x4000000000000000782Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500619658%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\ATOMICTEST.VBS01-0x526eb1f51C:\Users\research\AppData\Local\Temp\AtomicTest.vbs 800504000x4000000000000000781Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500718481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_ZIYIQXBY.AGF.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_ziyiqxby.agf.ps1 800504000x4000000000000000780Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500324081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_MLDI5F0Y.2AL.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_mldi5f0y.2al.ps1 800504000x4000000000000000779Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500642481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_B3NBMJZN.C3N.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_b3nbmjzn.c3n.ps1 800504000x4000000000000000778Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001120881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_BNON2PA5.RKN.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_bnon2pa5.rkn.ps1 800504000x4000000000000000777Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001060081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_ZA5CZXJA.THW.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_za5czxja.thw.ps1 800504000x4000000000000000776Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001063681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_NVMLKQRF.QK5.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_nvmlkqrf.qk5.ps1 800504000x4000000000000000775Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500768481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_NZWT2VRY.Q1K.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_nzwt2vry.q1k.ps1 800504000x4000000000000000774Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500697281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_YTN0CBCO.SBE.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_ytn0cbco.sbe.ps1 800504000x4000000000000000773Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500154881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_ORKMOJZ1.YGG.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_orkmojz1.ygg.ps1 800504000x4000000000000000772Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500709281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_3QPIUER4.ND1.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_3qpiuer4.nd1.ps1 800504000x4000000000000000771Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500312081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_YRWMKWUM.5BU.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_yrwmkwum.5bu.ps1 800504000x4000000000000000770Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001183681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_BJVCKWIY.00V.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_bjvckwiy.00v.ps1 800504000x4000000000000000769Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500131681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_B5JONVID.QOC.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_b5jonvid.qoc.ps1 800504000x4000000000000000768Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500967281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_F5W1MG2U.AM0.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_f5w1mg2u.am0.ps1 800504000x4000000000000000767Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500541281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_OQJWJ1OY.AJA.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_oqjwj1oy.aja.ps1 800504000x4000000000000000766Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500774881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_DNFH4XY2.M5N.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_dnfh4xy2.m5n.ps1 800504000x4000000000000000765Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001092881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_M4Q1SLCX.UHX.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_m4q1slcx.uhx.ps1 800504000x4000000000000000764Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001043681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_HIH3SF5O.T0P.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_hih3sf5o.t0p.ps1 800504000x4000000000000000763Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001112081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_1VZHLCVY.Q10.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_1vzhlcvy.q10.ps1 800504000x4000000000000000762Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500574481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_XIVEXQD0.JZJ.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_xivexqd0.jzj.ps1 800504000x4000000000000000761Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500374481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_20SZ4PFD.5XL.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_20sz4pfd.5xl.ps1 800504000x4000000000000000760Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500113281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_Y1P12TZM.NOJ.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_y1p12tzm.noj.ps1 800504000x4000000000000000759Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001064081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_LLATLZ4F.S2K.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_llatlz4f.s2k.ps1 800504000x4000000000000000758Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001176081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_JHMW52L5.VAF.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_jhmw52l5.vaf.ps1 800504000x4000000000000000757Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500868481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_NVCQFKNJ.OZF.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_nvcqfknj.ozf.ps1 800504000x4000000000000000756Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001202081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_GHPSS2EW.RXK.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_ghpss2ew.rxk.ps1 800504000x4000000000000000755Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500974081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_QWF3XDZL.Z0F.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_qwf3xdzl.z0f.ps1 800504000x4000000000000000754Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500686881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_Q0ANZCEQ.CYM.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_q0anzceq.cym.ps1 800504000x4000000000000000753Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500707681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_KMOGX5HE.4AR.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_kmogx5he.4ar.ps1 800504000x4000000000000000752Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992476%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\WRITE-PREREQRESULTS.PS101-0x526eb1f69C:\AtomicRedTeam\invoke-atomicredteam\Private\Write-PrereqResults.ps1 800504000x4000000000000000751Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992471%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\WRITE-KEYVALUE.PS101-0x526eb1f64C:\AtomicRedTeam\invoke-atomicredteam\Private\Write-KeyValue.ps1 800504000x4000000000000000750Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992469%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\SHOW-DETAILS.PS101-0x526eb1f62C:\AtomicRedTeam\invoke-atomicredteam\Private\Show-Details.ps1 800504000x4000000000000000749Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992474%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\REPLACE-INPUTARGS.PS101-0x526eb1f67C:\AtomicRedTeam\invoke-atomicredteam\Private\Replace-InputArgs.ps1 800504000x4000000000000000748Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992471%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\INVOKE-PROCESS.PS101-0x526eb1f64C:\AtomicRedTeam\invoke-atomicredteam\Private\Invoke-Process.ps1 800504000x4000000000000000747Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992479%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\INVOKE-KILLPROCESSTREE.PS101-0x526eb1f72C:\AtomicRedTeam\invoke-atomicredteam\Private\Invoke-KillProcessTree.ps1 800504000x4000000000000000746Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992478%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\INVOKE-EXECUTECOMMAND.PS101-0x526eb1f71C:\AtomicRedTeam\invoke-atomicredteam\Private\Invoke-ExecuteCommand.ps1 800504000x4000000000000000745Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992476%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\INVOKE-CHECKPREREQS.PS101-0x526eb1f69C:\AtomicRedTeam\invoke-atomicredteam\Private\Invoke-CheckPrereqs.ps1 800504000x4000000000000000744Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992471%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\GET-TARGETINFO.PS101-0x526eb1f64C:\AtomicRedTeam\invoke-atomicredteam\Private\Get-TargetInfo.ps1 800504000x4000000000000000743Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992475%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\GET-PREREQEXECUTOR.PS101-0x526eb1f68C:\AtomicRedTeam\invoke-atomicredteam\Private\Get-PrereqExecutor.ps1 800504000x4000000000000000742Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992471%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\START-ATOMICGUI.PS101-0x526eb1f64C:\AtomicRedTeam\invoke-atomicredteam\Public\Start-AtomicGUI.ps1 800504000x4000000000000000741Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992466%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\NEW-ATOMIC.PS101-0x526eb1f59C:\AtomicRedTeam\invoke-atomicredteam\Public\New-Atomic.ps1 800504000x4000000000000000740Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992483%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-WEBREQUESTVERIFYHASH.PS101-0x526eb1f76C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-WebRequestVerifyHash.ps1 800504000x4000000000000000739Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992480%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-SETUPATOMICRUNNER.PS101-0x526eb1f73C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-SetupAtomicRunner.ps1 800504000x4000000000000000738Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992484%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-RUNNERSCHEDULEMETHODS.PS101-0x526eb1f77C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-RunnerScheduleMethods.ps1 800504000x4000000000000000737Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992482%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-KICKOFFATOMICRUNNER.PS101-0x526eb1f75C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-KickoffAtomicRunner.ps1 800504000x4000000000000000736Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992475%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-FETCHFROMZIP.PS101-0x526eb1f68C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-FetchFromZip.ps1 800504000x4000000000000000735Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992473%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-ATOMICTEST.PS101-0x526eb1f66C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-AtomicTest.ps1 800504000x4000000000000000734Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992484%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-RUNNERSCHEDULEMETHODS.PS101-0x526eb1f77C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-RunnerScheduleMethods.ps1 800504000x4000000000000000733Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992475%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\INVOKE-ATOMICRUNNER.PS101-0x526eb1f68C:\AtomicRedTeam\invoke-atomicredteam\Public\Invoke-AtomicRunner.ps1 800504000x4000000000000000732Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992478%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\GET-PREFERREDIPADDRESS.PS101-0x526eb1f71C:\AtomicRedTeam\invoke-atomicredteam\Public\Get-PreferredIPAddress.ps1 800504000x4000000000000000731Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992475%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\GET-ATOMICTECHNIQUE.PS101-0x526eb1f68C:\AtomicRedTeam\invoke-atomicredteam\Public\Get-AtomicTechnique.ps1 800504000x4000000000000000730Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992462%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\CONFIG.PS101-0x526eb1f55C:\AtomicRedTeam\invoke-atomicredteam\Public\config.ps1 800504000x4000000000000000729Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992474%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\ATOMICCLASSSCHEMA.PS101-0x526eb1f67C:\AtomicRedTeam\invoke-atomicredteam\Private\AtomicClassSchema.ps1 800504000x4000000000000000728Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992470%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\INVOKE-ATOMICREDTEAM.PSM101-0x526eb1f63C:\AtomicRedTeam\invoke-atomicredteam\Invoke-AtomicRedTeam.psm1 800504000x4000000000000000727Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992481%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\WINEVENT-EXECUTIONLOGGER.PSM101-0x526eb1f74C:\AtomicRedTeam\invoke-atomicredteam\Public\WinEvent-ExecutionLogger.psm1 800504000x4000000000000000726Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992479%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\SYSLOG-EXECUTIONLOGGER.PSM101-0x526eb1f72C:\AtomicRedTeam\invoke-atomicredteam\Public\Syslog-ExecutionLogger.psm1 800504000x4000000000000000725Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992479%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\ATTIRE-EXECUTIONLOGGER.PSM101-0x526eb1f72C:\AtomicRedTeam\invoke-atomicredteam\Public\Attire-ExecutionLogger.psm1 800504000x4000000000000000724Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992480%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\DEFAULT-EXECUTIONLOGGER.PSM101-0x526eb1f73C:\AtomicRedTeam\invoke-atomicredteam\Public\Default-ExecutionLogger.psm1 800504000x4000000000000000723Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992462%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PUBLIC\CONFIG.PS101-0x526eb1f55C:\AtomicRedTeam\invoke-atomicredteam\Public\config.ps1 800504000x4000000000000000722Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992474%OSDRIVE%\ATOMICREDTEAM\INVOKE-ATOMICREDTEAM\PRIVATE\ATOMICCLASSSCHEMA.PS101-0x526eb1f67C:\AtomicRedTeam\invoke-atomicredteam\Private\AtomicClassSchema.ps1 800504000x4000000000000000721Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992482%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\LOAD-ASSEMBLIES.PS101-0x526eb1f84C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\Load-Assemblies.ps1 800504000x4000000000000000720Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992483%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\POWERSHELL-YAML.PSM101-0x526eb1f85C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\powershell-yaml.psm1 800504000x4000000000000000719Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992482%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\POWERSHELL-YAML\0.4.7\LOAD-ASSEMBLIES.PS101-0x526eb1f84C:\Program Files\WindowsPowerShell\Modules\powershell-yaml\0.4.7\Load-Assemblies.ps1 800504000x4000000000000000718Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500992481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_UPLWQ1VI.SID.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_uplwq1vi.sid.ps1 800504000x4000000000000000717Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001142081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_LFKMQ3MT.FOW.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_lfkmq3mt.fow.ps1 800504000x4000000000000000716Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001276481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_HOB3XHKE.0FB.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_hob3xhke.0fb.ps1 800504000x4000000000000000715Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500580481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_B34B14XY.BPQ.PS101-0x526eb1f74C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_b34b14xy.bpq.ps1 800504000x4000000000000000714Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500644112%OSDRIVE%\USERS\RESEARCH\DESKTOP\WINDOWSDEFENDERATPONBOARDINGPACKAGE\WINDOWSDEFENDERATPLOCALONBOARDINGSCRIPT.CMD01-0x526eb1f105C:\Users\research\Desktop\WindowsDefenderATPOnboardingPackage\WindowsDefenderATPLocalOnboardingScript.cmd 802304000x1000000000000000647Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500991628MicrosoftWindows.CrossDevice125CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24012.117.00 802304000x1000000000000000646Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500991628MicrosoftWindows.CrossDevice125CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24012.117.00 802304000x1000000000000000645Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500991628MicrosoftWindows.CrossDevice125CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24012.117.00 802304000x1000000000000000644Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18991628MicrosoftWindows.CrossDevice125CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24012.117.00 802304000x1000000000000000643Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18991628MicrosoftWindows.CrossDevice125CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24012.117.00 802304000x1000000000000000642Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18991628MicrosoftWindows.CrossDevice125CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24012.117.00 802304000x1000000000000000641Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500484814MicrosoftTeams118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24047.202.2704.38 802304000x1000000000000000640Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669614MicrosoftTeams118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24047.202.2704.38 802304000x1000000000000000639Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669614MicrosoftTeams118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24047.202.2704.38 802304000x1000000000000000638Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669614MicrosoftTeams118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24047.202.2704.38 802304000x1000000000000000637Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669627Microsoft.OutlookForWindows128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.OUTLOOKFORWINDOWS\APPX\1.2024.214.400 802304000x1000000000000000636Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669628MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.86.00 802304000x1000000000000000635Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669628MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\0.24022.86.00 802304000x1000000000000000634Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669628MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\0.24022.86.00 802304000x1000000000000000633Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669619Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000632Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669619Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000631Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669619Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000630Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669630Microsoft.PowerAutomateDesktop128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\1.0.1110.00 802304000x1000000000000000629Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669630Microsoft.PowerAutomateDesktop128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\1.0.1110.00 802304000x1000000000000000628Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669630Microsoft.PowerAutomateDesktop131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\11.2403.237.00 802304000x1000000000000000627Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669617Microsoft.LockApp115CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.LOCKAPP\APPX\10.0.22621.3235 802304000x1000000000000000626Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18669643Microsoft.Windows.OOBENetworkConnectionFlow141CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCONNECTIONFLOW\APPX\10.0.21302.1000 802304000x1000000000000000625Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18669642Microsoft.Windows.OOBENetworkCaptivePortal140CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPORTAL\APPX\10.0.21302.1000 802304000x1000000000000000624Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669614MicrosoftTeams118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24047.202.2704.38 802304000x1000000000000000623Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669630Microsoft.MicrosoftEdge.Stable130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE.STABLE\APPX\122.0.2365.92 802304000x1000000000000000622Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669630Microsoft.MicrosoftEdge.Stable130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE.STABLE\APPX\122.0.2365.92 802304000x1000000000000000621Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669629Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000620Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669629Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000619Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669629Microsoft.DesktopAppInstaller131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\2024.307.343.00 802304000x1000000000000000618Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500669627MicrosoftWindows.Client.CBS128CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.CBS\APPX\1000.22687.1000.00 802304000x1000000000000000617Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241229Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000616Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241229Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000615Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241229Microsoft.DesktopAppInstaller131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\2024.307.343.00 802304000x1000000000000000614Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241219Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000613Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241219Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000612Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241219Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000611Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241230Microsoft.PowerAutomateDesktop128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\1.0.1110.00 802304000x1000000000000000610Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241230Microsoft.PowerAutomateDesktop128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\1.0.1110.00 802304000x1000000000000000609Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18241230Microsoft.PowerAutomateDesktop131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\11.2403.237.00 802304000x1000000000000000608Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18432830Microsoft.MicrosoftEdge.Stable130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE.STABLE\APPX\122.0.2365.92 802304000x1000000000000000607Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-1870827Microsoft.OutlookForWindows128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.OUTLOOKFORWINDOWS\APPX\1.2024.214.400 802304000x1000000000000000606Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568019Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000605Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568019Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000604Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568019Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000603Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568029Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000602Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568029Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000601Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568029Microsoft.DesktopAppInstaller131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\2024.307.343.00 802304000x1000000000000000600Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568030Microsoft.PowerAutomateDesktop128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\1.0.1110.00 802304000x1000000000000000599Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568030Microsoft.PowerAutomateDesktop128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\1.0.1110.00 802304000x1000000000000000598Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568030Microsoft.PowerAutomateDesktop131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.POWERAUTOMATEDESKTOP\APPX\11.2403.237.00 802304000x1000000000000000597Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18568030Microsoft.MicrosoftEdge.Stable130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE.STABLE\APPX\122.0.2365.80 802304000x1000000000000000596Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18520819Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000595Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18520819Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000594Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18520819Clipchamp.Clipchamp73CN=33F0F141-36F3-4EC2-A77D-51B53D0BA0E4\CLIPCHAMP.CLIPCHAMP\APPX\2.9.3.00 802304000x1000000000000000593Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18520829Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000592Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18520829Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10661.00 802304000x1000000000000000591Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18520829Microsoft.DesktopAppInstaller131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\2024.307.343.00 802304000x1000000000000000590Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18341628MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\0.24022.86.00 802304000x1000000000000000589Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18341628MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\0.24022.86.00 802304000x1000000000000000588Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18341628MicrosoftWindows.CrossDevice124CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CROSSDEVICE\APPX\1.24022.86.00 802304000x1000000000000000587Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411243Microsoft.Windows.OOBENetworkConnectionFlow141CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCONNECTIONFLOW\APPX\10.0.21302.1000 802304000x1000000000000000586Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411242Microsoft.Windows.OOBENetworkCaptivePortal140CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPORTAL\APPX\10.0.21302.1000 802304000x1000000000000000585Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411243Microsoft.Windows.OOBENetworkConnectionFlow141CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCONNECTIONFLOW\APPX\10.0.21302.1000 802304000x1000000000000000584Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411242Microsoft.Windows.OOBENetworkCaptivePortal140CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPORTAL\APPX\10.0.21302.1000 802304000x1000000000000000583Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411243Microsoft.Windows.OOBENetworkConnectionFlow141CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCONNECTIONFLOW\APPX\10.0.21302.1000 802304000x1000000000000000582Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411242Microsoft.Windows.OOBENetworkCaptivePortal140CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPORTAL\APPX\10.0.21302.1000 802304000x1000000000000000581Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411243Microsoft.Windows.OOBENetworkConnectionFlow141CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCONNECTIONFLOW\APPX\10.0.21302.1000 802304000x1000000000000000580Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411242Microsoft.Windows.OOBENetworkCaptivePortal140CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPORTAL\APPX\10.0.21302.1000 802304000x1000000000000000579Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411228MicrosoftWindows.Client.Core129CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.CORE\APPX\1000.22648.1000.00 802304000x1000000000000000578Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411243Microsoft.Windows.OOBENetworkConnectionFlow141CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCONNECTIONFLOW\APPX\10.0.21302.1000 802304000x1000000000000000577Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18411242Microsoft.Windows.OOBENetworkCaptivePortal140CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.OOBENETWORKCAPTIVEPORTAL\APPX\10.0.21302.1000 800504000x4000000000000000713Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500148871%WINDIR%\TEMP\SDIAG_C8F64238-694D-4DCB-9257-851987A7892B\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3573C:\Windows\TEMP\SDIAG_c8f64238-694d-4dcb-9257-851987a7892b\CL_Utility.ps1 800504000x4000000000000000712Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500148881%WINDIR%\TEMP\SDIAG_C8F64238-694D-4DCB-9257-851987A7892B\TS_DIAGNOSTICHISTORY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3583C:\Windows\TEMP\SDIAG_c8f64238-694d-4dcb-9257-851987a7892b\TS_DiagnosticHistory.ps1 800504000x4000000000000000711Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500148871%WINDIR%\TEMP\SDIAG_C8F64238-694D-4DCB-9257-851987A7892B\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3573C:\Windows\TEMP\SDIAG_c8f64238-694d-4dcb-9257-851987a7892b\CL_Utility.ps1 800504000x4000000000000000710Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-500148872%WINDIR%\TEMP\SDIAG_C8F64238-694D-4DCB-9257-851987A7892B\TS_WERQUEUE.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3574C:\Windows\TEMP\SDIAG_c8f64238-694d-4dcb-9257-851987a7892b\TS_WERQueue.ps1 800504000x4000000000000000709Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500148881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_AB4BNLSF.IDU.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_ab4bnlsf.idu.ps1 800702000x4000000000000000708Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694826%OSDRIVE%\TEMP\TESTCLM.PS101-0x2e2463c719C:\temp\testclm.ps1 800702000x4000000000000000707Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694826%OSDRIVE%\TEMP\TESTCLM.PS101-0x2e2463c719C:\temp\testclm.ps1 800702000x4000000000000000706Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694824%OSDRIVE%\TEMP\HELLO.PS101-0x2e2463c717C:\temp\hello.ps1 800702000x4000000000000000705Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694824%OSDRIVE%\TEMP\HELLO.PS101-0x2e2463c717C:\temp\hello.ps1 800504000x4000000000000000704Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_WSSJ1UED.2GR.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_wssj1ued.2gr.ps1 800504000x4000000000000000703Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_5I1KGWHV.GJF.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_5i1kgwhv.gjf.ps1 800504000x4000000000000000702Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_F12EAY3D.CMZ.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_f12eay3d.cmz.ps1 800504000x4000000000000000701Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_QCAES41L.20P.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_qcaes41l.20p.ps1 800504000x4000000000000000700Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_FOK1GVAT.UX2.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_fok1gvat.ux2.ps1 800504000x4000000000000000699Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500995281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_OWNZ3T1O.JYS.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_ownz3t1o.jys.ps1 800702000x4000000000000000698Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694824%OSDRIVE%\TEMP\HELLO.PS101-0x2e2463c717C:\temp\hello.ps1 800702000x4000000000000000697Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694824%OSDRIVE%\TEMP\HELLO.PS101-0x2e2463c717C:\temp\hello.ps1 800702000x4000000000000000696Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694826%OSDRIVE%\TEMP\TESTCLM.PS101-0x2e2463c719C:\temp\testclm.ps1 800702000x4000000000000000695Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694826%OSDRIVE%\TEMP\TESTCLM.PS101-0x2e2463c719C:\temp\testclm.ps1 800702000x4000000000000000694Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694818%OSDRIVE%\TEST.PS101-0x2e2463c711C:\test.ps1 800702000x4000000000000000693Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694818%OSDRIVE%\TEST.PS101-0x2e2463c711C:\test.ps1 800702000x4000000000000000692Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694823%OSDRIVE%\TEMP\TEST.PS101-0x2e2463c716C:\temp\test.ps1 800702000x4000000000000000691Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694823%OSDRIVE%\TEMP\TEST.PS101-0x2e2463c716C:\temp\test.ps1 800504000x4000000000000000690Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001191223%OSDRIVE%\TEMP\TEST.PS101-0x178e3516C:\temp\test.ps1 800504000x4000000000000000689Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001191223%OSDRIVE%\TEMP\TEST.PS101-0x178e3516C:\temp\test.ps1 800702000x4000000000000000688Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694823%OSDRIVE%\TEMP\TEST.PS101-0x2e2463c716C:\temp\test.ps1 800702000x4000000000000000687Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694823%OSDRIVE%\TEMP\TEST.PS101-0x2e2463c716C:\temp\test.ps1 800504000x4000000000000000686Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001191217%WINDIR%\TEST.PS101-0x178e3519C:\Windows\test.ps1 800504000x4000000000000000685Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001191218%OSDRIVE%\TEST.PS101-0x178e3511C:\test.ps1 800504000x4000000000000000684Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c784C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000683Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c784C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000682Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948112%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.DIAGNOSTICS\MICROSOFT.POWERSHELL.DIAGNOSTICS.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7121C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Diagnostics\Microsoft.PowerShell.Diagnostics.psd1 800504000x4000000000000000681Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948112%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.DIAGNOSTICS\MICROSOFT.POWERSHELL.DIAGNOSTICS.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7121C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Diagnostics\Microsoft.PowerShell.Diagnostics.psd1 800504000x4000000000000000680Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694866%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\APPLOCKER\APPLOCKER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c775C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker\AppLocker.psd1 800504000x4000000000000000679Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694866%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\APPLOCKER\APPLOCKER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c775C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker\AppLocker.psd1 800504000x4000000000000000678Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000677Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000676Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000675Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800702000x4000000000000000674Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694824%OSDRIVE%\TEMP\HELLO.PS101-0x2e2463c717C:\temp\hello.ps1 800702000x4000000000000000673Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694824%OSDRIVE%\TEMP\HELLO.PS101-0x2e2463c717C:\temp\hello.ps1 800504000x4000000000000000672Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000671Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006948110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c7119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000670Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c775C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000669Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c775C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000668Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c784C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000667Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c784C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000666Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c775C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800504000x4000000000000000665Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000694873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e2463c775C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800702000x4000000000000000664Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694877%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_G05WCTPW.VKN.PSM101-0x2e2463c770C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_g05wctpw.vkn.psm1 800702000x4000000000000000663Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000694876%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_PKXOEVNZ.EGK.PS101-0x2e2463c769C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_pkxoevnz.egk.ps1 800702000x4000000000000000662Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000661Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000660Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000659Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000658Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000657Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000656Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000655Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800504000x4000000000000000654Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003172104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000653Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003172104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000652Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003172104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000651Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003172104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800702000x4000000000000000650Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000649Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000648Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317224%OSDRIVE%\TEMP\HELLO.PS101-0x2e0dace017C:\temp\hello.ps1 800702000x4000000000000000647Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000986023%OSDRIVE%\TEMP\TEST.VBS01-0x2e0dace016C:\temp\test.vbs 800702000x4000000000000000646Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001136423%OSDRIVE%\TEMP\TEST.VBE01-0x2e0dace016C:\temp\test.vbe 800702000x4000000000000000645Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000155223%OSDRIVE%\TEMP\TEST.BAT01-0x2e0dace016C:\temp\test.bat 800504000x4000000000000000644Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317298%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDERPERFORMANCE\CONFIGDEFENDERPERFORMANCE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0107C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\ConfigDefenderPerformance.psd1 800504000x4000000000000000643Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317298%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDERPERFORMANCE\CONFIGDEFENDERPERFORMANCE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0107C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefenderPerformance\ConfigDefenderPerformance.psd1 800504000x4000000000000000642Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317278%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPROLLBACK.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace087C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpRollback.cdxml 800504000x4000000000000000641Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317278%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPROLLBACK.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace087C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpRollback.cdxml 800504000x4000000000000000640Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317277%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPWDOSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace086C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpWDOScan.cdxml 800504000x4000000000000000639Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317277%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPWDOSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace086C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpWDOScan.cdxml 800504000x4000000000000000638Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317279%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSIGNATURE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace088C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpSignature.cdxml 800504000x4000000000000000637Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317279%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSIGNATURE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace088C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpSignature.cdxml 800504000x4000000000000000636Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317274%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace083C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpScan.cdxml 800504000x4000000000000000635Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317274%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPSCAN.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace083C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpScan.cdxml 800504000x4000000000000000634Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317285%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATDETECTION.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace094C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatDetection.cdxml 800504000x4000000000000000633Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317285%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATDETECTION.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace094C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatDetection.cdxml 800504000x4000000000000000632Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317283%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATCATALOG.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace092C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatCatalog.cdxml 800504000x4000000000000000631Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317283%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREATCATALOG.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace092C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreatCatalog.cdxml 800504000x4000000000000000630Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREAT.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace085C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreat.cdxml 800504000x4000000000000000629Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPTHREAT.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace085C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpThreat.cdxml 800504000x4000000000000000628Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317280%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPPREFERENCE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace089C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpPreference.cdxml 800504000x4000000000000000627Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317280%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPPREFERENCE.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace089C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpPreference.cdxml 800504000x4000000000000000626Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317284%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPCOMPUTERSTATUS.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace093C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpComputerStatus.cdxml 800504000x4000000000000000625Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317284%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\MSFT_MPCOMPUTERSTATUS.CDXML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace093C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\MSFT_MpComputerStatus.cdxml 800504000x4000000000000000624Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\CONFIGDEFENDER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace085C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\ConfigDefender.psd1 800504000x4000000000000000623Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317276%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\CONFIGDEFENDER\CONFIGDEFENDER.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace085C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ConfigDefender\ConfigDefender.psd1 800504000x4000000000000000622Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003172110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000621Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003172110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace0119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000620Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace075C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000619Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace075C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000618Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317282%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace084C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000617Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317282%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace084C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000616Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace075C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800504000x4000000000000000615Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000317273%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2e0dace075C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800702000x4000000000000000614Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317277%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_UN0BT3BU.HP0.PSM101-0x2e0dace070C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_un0bt3bu.hp0.psm1 800702000x4000000000000000613Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000317276%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_DAJKQ0BP.SMM.PS101-0x2e0dace069C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_dajkq0bp.smm.ps1 800504000x4000000000000000612Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001191281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_FEZKBIJK.KZV.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_fezkbijk.kzv.ps1 802304000x1000000000000000576Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001251235microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21844.00 802304000x1000000000000000575Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001251235microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21844.00 802304000x1000000000000000574Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181251235microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21844.00 802304000x1000000000000000573Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181251235microsoft.windowscommunicationsapps142CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCOMMUNICATIONSAPPS\APPX\16005.14326.21844.00 802304000x1000000000000000572Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500126037MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.270.00 802304000x1000000000000000571Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500126037MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.270.00 802304000x1000000000000000570Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18126037MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.270.00 802304000x1000000000000000569Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18126037MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.270.00 802304000x1000000000000000568Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500126030Microsoft.WindowsSoundRecorder126CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSOUNDRECORDER\APPX\1.0.76.00 802304000x1000000000000000567Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500126030Microsoft.WindowsSoundRecorder131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSOUNDRECORDER\APPX\2021.2312.5.00 802304000x1000000000000000566Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18126030Microsoft.WindowsSoundRecorder126CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSOUNDRECORDER\APPX\1.0.76.00 802304000x1000000000000000565Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18126030Microsoft.WindowsSoundRecorder131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSOUNDRECORDER\APPX\2021.2312.5.00 802304000x1000000000000000564Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500550419Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000563Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500550419Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000562Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500550419Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000561Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18550419Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000560Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18550419Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000559Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18550419Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000558Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500343219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000557Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500343219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000556Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500343219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000555Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18343219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000554Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18343219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000553Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18343219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000552Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143615Microsoft.Paint115CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PAINT\APPX\11.2401.20.00 802304000x1000000000000000551Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143615Microsoft.Paint115CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PAINT\APPX\11.2401.20.00 802304000x1000000000000000550Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143615Microsoft.Paint115CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PAINT\APPX\11.2401.20.00 802304000x1000000000000000549Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143624Microsoft.WindowsNotepad124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSNOTEPAD\APPX\11.2401.26.00 802304000x1000000000000000548Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143624Microsoft.WindowsNotepad124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSNOTEPAD\APPX\11.2401.26.00 802304000x1000000000000000547Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143624Microsoft.WindowsNotepad124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSNOTEPAD\APPX\11.2401.26.00 802304000x1000000000000000546Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000545Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000544Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001143619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000543Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143624Microsoft.WindowsNotepad124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSNOTEPAD\APPX\11.2401.26.00 802304000x1000000000000000542Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143624Microsoft.WindowsNotepad124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSNOTEPAD\APPX\11.2401.26.00 802304000x1000000000000000541Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143615Microsoft.Paint115CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PAINT\APPX\11.2401.20.00 802304000x1000000000000000540Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143624Microsoft.WindowsNotepad124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSNOTEPAD\APPX\11.2401.26.00 802304000x1000000000000000539Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143615Microsoft.Paint115CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PAINT\APPX\11.2401.20.00 802304000x1000000000000000538Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143615Microsoft.Paint115CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PAINT\APPX\11.2401.20.00 802304000x1000000000000000537Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000536Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000535Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181143619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 800504000x4000000000000000611Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001316071%WINDIR%\TEMP\SDIAG_96DD0C0E-2273-4059-8620-3AB2E6A1F15B\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3573C:\Windows\TEMP\SDIAG_96dd0c0e-2273-4059-8620-3ab2e6a1f15b\CL_Utility.ps1 800504000x4000000000000000610Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001316081%WINDIR%\TEMP\SDIAG_96DD0C0E-2273-4059-8620-3AB2E6A1F15B\TS_DIAGNOSTICHISTORY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3583C:\Windows\TEMP\SDIAG_96dd0c0e-2273-4059-8620-3ab2e6a1f15b\TS_DiagnosticHistory.ps1 800504000x4000000000000000609Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001316071%WINDIR%\TEMP\SDIAG_96DD0C0E-2273-4059-8620-3AB2E6A1F15B\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3573C:\Windows\TEMP\SDIAG_96dd0c0e-2273-4059-8620-3ab2e6a1f15b\CL_Utility.ps1 800504000x4000000000000000608Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001316072%WINDIR%\TEMP\SDIAG_96DD0C0E-2273-4059-8620-3AB2E6A1F15B\TS_WERQUEUE.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3574C:\Windows\TEMP\SDIAG_96dd0c0e-2273-4059-8620-3ab2e6a1f15b\TS_WERQueue.ps1 800504000x4000000000000000607Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001316081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_S1DKGMTQ.EXR.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_s1dkgmtq.exr.ps1 802304000x1000000000000000534Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500314019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000533Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500314019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000532Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500314019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000531Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18314019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000530Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18314019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000529Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18314019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.26.00 802304000x1000000000000000528Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500662019Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000527Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500662019Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000526Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500662019Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000525Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18662019Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000524Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18662019Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000523Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18662019Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000522Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001072814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000521Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001072814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000520Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500134414MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000519Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500134414MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000518Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500549214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000517Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500549214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000516Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001281614MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000515Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001281614MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000514Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001302814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000513Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001302814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000512Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500635214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000511Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500635214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000510Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001259614MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000509Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001259614MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000508Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001229614MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000507Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001229614MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000506Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500173214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000505Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500173214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000504Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500745214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000503Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500745214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000502Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001262814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000501Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001262814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000500Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001250814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000499Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001250814MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000498Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500834025Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000497Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500834025Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000496Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18834025Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000495Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18834025Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000494Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500676414MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000493Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500676414MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000492Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500728014MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000491Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500728014MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000490Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121219Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24021.105.00 802304000x1000000000000000489Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121219Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24021.105.00 802304000x1000000000000000488Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121219Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000487Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121228Microsoft.VP9VideoExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.VP9VIDEOEXTENSIONS\APPX\1.1.451.00 802304000x1000000000000000486Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121228Microsoft.VP9VideoExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.VP9VIDEOEXTENSIONS\APPX\1.1.451.00 802304000x1000000000000000485Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121225Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000484Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121225Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000483Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121219Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24021.105.00 802304000x1000000000000000482Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121219Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24021.105.00 802304000x1000000000000000481Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121219Microsoft.YourPhone120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24021.105.00 802304000x1000000000000000480Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121225Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000479Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121225Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000478Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121228Microsoft.VP9VideoExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.VP9VIDEOEXTENSIONS\APPX\1.1.451.00 802304000x1000000000000000477Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18121228Microsoft.VP9VideoExtensions125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.VP9VIDEOEXTENSIONS\APPX\1.1.451.00 802304000x1000000000000000476Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000475Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500121214MicrosoftTeams121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTTEAMS\APPX\24033.1005.2701.7380 802304000x1000000000000000474Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149226Microsoft.StorePurchaseApp128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.STOREPURCHASEAPP\APPX\22312.1401.4.00 802304000x1000000000000000473Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149226Microsoft.StorePurchaseApp128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.STOREPURCHASEAPP\APPX\22312.1401.4.00 802304000x1000000000000000472Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149226Microsoft.StorePurchaseApp128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.STOREPURCHASEAPP\APPX\22312.1401.4.00 802304000x1000000000000000471Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000470Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000469Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000468Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149225Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000467Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500149225Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000466Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149226Microsoft.StorePurchaseApp128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.STOREPURCHASEAPP\APPX\22312.1401.4.00 802304000x1000000000000000465Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149226Microsoft.StorePurchaseApp128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.STOREPURCHASEAPP\APPX\22312.1401.4.00 802304000x1000000000000000464Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149226Microsoft.StorePurchaseApp128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.STOREPURCHASEAPP\APPX\22312.1401.4.00 802304000x1000000000000000463Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000462Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000461Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000460Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149225Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000459Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18149225Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000458Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001065225Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000457Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001065225Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000456Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001065219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000455Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001065219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000454Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001065219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000453Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181065225Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000452Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181065225Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000451Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181065219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000450Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181065219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000449Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181065219Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000448Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500395637MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.210.00 802304000x1000000000000000447Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500395637MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.210.00 802304000x1000000000000000446Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299637MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.210.00 802304000x1000000000000000445Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299637MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.210.00 802304000x1000000000000000444Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299629Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10582.00 802304000x1000000000000000443Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299629Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10582.00 802304000x1000000000000000442Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299629Microsoft.DesktopAppInstaller132CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\2024.227.1731.00 802304000x1000000000000000441Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299629Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10582.00 802304000x1000000000000000440Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299629Microsoft.DesktopAppInstaller129CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\1.22.10582.00 802304000x1000000000000000439Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299629Microsoft.DesktopAppInstaller132CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\APPX\2024.227.1731.00 802304000x1000000000000000438Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299637MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.210.00 802304000x1000000000000000437Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299637MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.210.00 802304000x1000000000000000436Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299625Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000435Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299625Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 802304000x1000000000000000434Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000433Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000432Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001299619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000431Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000430Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000429Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299619Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000428Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299625Microsoft.WindowsTerminal125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\1.19.10573.00 802304000x1000000000000000427Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181299625Microsoft.WindowsTerminal128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSTERMINAL\APPX\3001.19.10573.00 800504000x4000000000000000606Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001300071%WINDIR%\TEMP\SDIAG_C809EB1B-6DEA-4A68-BA42-6F1CD6B05D6F\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3573C:\Windows\TEMP\SDIAG_c809eb1b-6dea-4a68-ba42-6f1cd6b05d6f\CL_Utility.ps1 800504000x4000000000000000605Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001300081%WINDIR%\TEMP\SDIAG_C809EB1B-6DEA-4A68-BA42-6F1CD6B05D6F\TS_DIAGNOSTICHISTORY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3583C:\Windows\TEMP\SDIAG_c809eb1b-6dea-4a68-ba42-6f1cd6b05d6f\TS_DiagnosticHistory.ps1 800504000x4000000000000000604Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001300071%WINDIR%\TEMP\SDIAG_C809EB1B-6DEA-4A68-BA42-6F1CD6B05D6F\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3573C:\Windows\TEMP\SDIAG_c809eb1b-6dea-4a68-ba42-6f1cd6b05d6f\CL_Utility.ps1 800504000x4000000000000000603Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001300072%WINDIR%\TEMP\SDIAG_C809EB1B-6DEA-4A68-BA42-6F1CD6B05D6F\TS_WERQUEUE.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x178e3574C:\Windows\TEMP\SDIAG_c809eb1b-6dea-4a68-ba42-6f1cd6b05d6f\TS_WERQueue.ps1 800504000x4000000000000000602Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001300081%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_U22W1POE.HHD.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_u22w1poe.hhd.ps1 802304000x1000000000000000426Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001292019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000425Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001292019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000424Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001292019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000423Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181292019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000422Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181292019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000421Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181292019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000420Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170027Microsoft.XboxGamingOverlay127CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMINGOVERLAY\APPX\7.124.2141.00 802304000x1000000000000000419Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170027Microsoft.XboxGamingOverlay127CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMINGOVERLAY\APPX\7.124.2141.00 802304000x1000000000000000418Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170027Microsoft.XboxGamingOverlay127CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMINGOVERLAY\APPX\7.124.2141.00 802304000x1000000000000000417Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000416Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000415Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000414Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170027Microsoft.XboxGamingOverlay127CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMINGOVERLAY\APPX\7.124.2141.00 802304000x1000000000000000413Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170027Microsoft.XboxGamingOverlay127CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMINGOVERLAY\APPX\7.124.2141.00 802304000x1000000000000000412Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170027Microsoft.XboxGamingOverlay127CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXGAMINGOVERLAY\APPX\7.124.2141.00 802304000x1000000000000000411Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170022Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.7.00 802304000x1000000000000000410Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170022Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.7.00 802304000x1000000000000000409Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170027Microsoft.WindowsCalculator126CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCALCULATOR\APPX\11.2401.0.00 802304000x1000000000000000408Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170027Microsoft.WindowsCalculator126CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCALCULATOR\APPX\11.2401.0.00 802304000x1000000000000000407Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001170027Microsoft.WindowsCalculator128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCALCULATOR\APPX\2021.2401.0.00 802304000x1000000000000000406Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000405Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000404Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170022Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.7.00 802304000x1000000000000000403Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170019Microsoft.GamingApp121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.GAMINGAPP\APPX\2402.1001.23.00 802304000x1000000000000000402Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170022Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.7.00 802304000x1000000000000000401Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170027Microsoft.WindowsCalculator126CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCALCULATOR\APPX\11.2401.0.00 802304000x1000000000000000400Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170027Microsoft.WindowsCalculator126CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCALCULATOR\APPX\11.2401.0.00 802304000x1000000000000000399Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181170027Microsoft.WindowsCalculator128CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSCALCULATOR\APPX\2021.2401.0.00 800504000x4000000000000000601Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001209681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_BFQF4KOA.CZ2.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_bfqf4koa.cz2.ps1 800504000x4000000000000000600Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500480849%OSDRIVE%\USERS\RESEARCH\DESKTOP\SLASHANDGRAB.PS101-0x178e3542C:\Users\research\Desktop\SlashandGrab.ps1 800504000x4000000000000000599Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500480881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_OMCZYP2H.3ZK.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_omczyp2h.3zk.ps1 800504000x4000000000000000598Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012184104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000597Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012184104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000596Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012184104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000595Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012184104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800702000x4000000000000000594Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001218477%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_LPY25QWL.TUT.PSM101-0x310bf970C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_lpy25qwl.tut.psm1 800702000x4000000000000000593Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001218476%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_MRN0NXTG.K4A.PS101-0x310bf969C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_mrn0nxtg.k4a.ps1 800504000x4000000000000000592Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012400104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000591Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012400104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000590Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012400104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000589Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-100012400104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800702000x4000000000000000588Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001240077%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_1VKZXWDW.3H2.PSM101-0x310bf970C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_1vkzxwdw.3h2.psm1 800702000x4000000000000000587Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001240076%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_3FY4B0ZO.EWB.PS101-0x310bf969C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_3fy4b0zo.ewb.ps1 800504000x4000000000000000586Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007496104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000585Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007496104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000584Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007496104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000583Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007496104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800702000x4000000000000000582Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000749677%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_IXKQMMN0.YL3.PSM101-0x310bf970C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_ixkqmmn0.yl3.psm1 800702000x4000000000000000581Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000749676%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_BMXN4OHS.AIC.PS101-0x310bf969C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_bmxn4ohs.aic.ps1 802304000x1000000000000000398Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500745621Microsoft.BingWeather116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.BINGWEATHER\APPX\3.2.8.00 802304000x1000000000000000397Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500745621Microsoft.BingWeather116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.BINGWEATHER\APPX\3.2.8.00 802304000x1000000000000000396Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500745621Microsoft.BingWeather121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.BINGWEATHER\APPX\4.53.50501.00 802304000x1000000000000000395Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745621Microsoft.BingWeather116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.BINGWEATHER\APPX\3.2.8.00 802304000x1000000000000000394Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745621Microsoft.BingWeather116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.BINGWEATHER\APPX\3.2.8.00 802304000x1000000000000000393Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745621Microsoft.BingWeather121CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.BINGWEATHER\APPX\4.53.50501.00 802304000x1000000000000000392Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745633Microsoft.XboxSpeechToTextOverlay133CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXSPEECHTOTEXTOVERLAY\APPX\1.21.13002.00 802304000x1000000000000000391Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745633Microsoft.XboxSpeechToTextOverlay133CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXSPEECHTOTEXTOVERLAY\APPX\1.21.13002.00 802304000x1000000000000000390Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745633Microsoft.XboxSpeechToTextOverlay133CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.XBOXSPEECHTOTEXTOVERLAY\APPX\1.21.13002.00 802304000x1000000000000000389Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745616Microsoft.People116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PEOPLE\APPX\10.2202.33.00 802304000x1000000000000000388Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745616Microsoft.People116CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PEOPLE\APPX\10.2202.33.00 802304000x1000000000000000387Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18745616Microsoft.People118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.PEOPLE\APPX\2021.2202.33.00 802304000x1000000000000000386Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500375228Microsoft.HEVCVideoExtension125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.HEVCVIDEOEXTENSION\APPX\2.1.451.00 802304000x1000000000000000385Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500375228Microsoft.HEVCVideoExtension125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.HEVCVIDEOEXTENSION\APPX\2.1.451.00 802304000x1000000000000000384Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18375228Microsoft.HEVCVideoExtension125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.HEVCVIDEOEXTENSION\APPX\2.1.451.00 802304000x1000000000000000383Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18375228Microsoft.HEVCVideoExtension125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.HEVCVIDEOEXTENSION\APPX\2.1.451.00 800504000x4000000000000000580Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500720481%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_LANAMFDZ.IHB.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_lanamfdz.ihb.ps1 800702000x4000000000000000579Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001076823%OSDRIVE%\TEMP\TEST.VBE01-0x310bf916C:\temp\test.vbe 800504000x4000000000000000578Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000792023%PROGRAMFILES%\TEST.BAT01-0x310bf925C:\Program Files\test.bat 800702000x4000000000000000577Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001008023%OSDRIVE%\TEMP\TEST.BAT01-0x310bf916C:\temp\test.bat 800504000x4000000000000000576Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006708110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000575Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10006708110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf9119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000574Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000670873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf975C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000573Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000670873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf975C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000572Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000670882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf984C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000571Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000670882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf984C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000570Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000670873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf975C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800504000x4000000000000000569Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000670873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x310bf975C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800702000x4000000000000000568Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000670877%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_JCDGBSIG.TSN.PSM101-0x310bf970C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_jcdgbsig.tsn.psm1 800702000x4000000000000000567Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000670876%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_0KN3G2GM.WCY.PS101-0x310bf969C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_0kn3g2gm.wcy.ps1 800504000x4000000000000000566Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500275281%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_0EPQ25LN.ZGP.PS101-0x178e3574C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_0epq25ln.zgp.ps1 802304000x1000000000000000382Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500558430Microsoft.MicrosoftEdge.Stable131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE.STABLE\APPX\121.0.2277.128 802304000x1000000000000000381Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18558430Microsoft.MicrosoftEdge.Stable131CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE.STABLE\APPX\121.0.2277.128 800702000x4000000000000000565Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000898823%OSDRIVE%\TEMP\TEST.BAT01-0x10b0949316C:\temp\test.bat 800504000x4000000000000000564Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000962023%PROGRAMFILES%\TEST.BAT01-0x10b0949325C:\Program Files\test.bat 800504000x4000000000000000563Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003616110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b09493119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000562Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10003616110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b09493119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000561Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000361673%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b0949375C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000560Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000361673%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b0949375C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000559Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000361682%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b0949384C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000558Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000361682%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b0949384C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000557Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000361673%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b0949375C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800504000x4000000000000000556Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000361673%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10b0949375C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800702000x4000000000000000555Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000361677%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_XCPZV3NT.EC2.PSM101-0x10b0949370C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_xcpzv3nt.ec2.psm1 800702000x4000000000000000554Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000361676%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_W4RU1IRG.DO1.PS101-0x10b0949369C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_w4ru1irg.do1.ps1 800702000x4000000000000000553Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001059623%OSDRIVE%\TEMP\TEST.BAT01-0x10adc27616C:\temp\test.bat 800504000x4000000000000000552Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10004488110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc276119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800504000x4000000000000000551Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10004488110%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.MANAGEMENT\MICROSOFT.POWERSHELL.MANAGEMENT.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc276119C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Management\Microsoft.PowerShell.Management.psd1 800702000x4000000000000000550Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000606423%OSDRIVE%\TEMP\TEST.VBS01-0x2cd8fda16C:\temp\test.vbs 800702000x4000000000000000549Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000724024%OSDRIVE%\TEMP\HELLO.PS101-0x2cd8fda17C:\temp\hello.ps1 800702000x4000000000000000548Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000724024%OSDRIVE%\TEMP\HELLO.PS101-0x2cd8fda17C:\temp\hello.ps1 800504000x4000000000000000547Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000448873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc27675C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000546Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000448873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc27675C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psm1 800504000x4000000000000000545Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000448882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc27684C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000544Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000448882%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.FORMAT.PS1XML065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc27684C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.format.ps1xml 800504000x4000000000000000543Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000448873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc27675C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800504000x4000000000000000542Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000448873%PROGRAMFILES%\WINDOWSPOWERSHELL\MODULES\PSREADLINE\2.0.0\PSREADLINE.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x10adc27675C:\Program Files\WindowsPowerShell\Modules\PSReadLine\2.0.0\PSReadLine.psd1 800702000x4000000000000000541Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000448877%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_EMBTWJ3Z.4HY.PSM101-0x10adc27670C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_embtwj3z.4hy.psm1 800702000x4000000000000000540Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000448876%OSDRIVE%\USERS\BOB\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_ZGPV3VRC.XIV.PS101-0x10adc27669C:\Users\bob\AppData\Local\Temp\__PSScriptPolicyTest_zgpv3vrc.xiv.ps1 800504000x4000000000000000539Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{06dce67b-934c-454f-a263-2515c8796a5d}62(Default Rule) All scripts located in the Program Files folder63D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%PROGRAMFILES%\*"))S-1-5-21-2580137126-784882126-1858780351-1000150423%PROGRAMFILES%\TEST.BAT01-0x26932a925c:\Program Files\test.bat 800702000x4000000000000000538Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000150423%OSDRIVE%\TEMP\TEST.BAT01-0x26932a916c:\temp\test.bat 800702000x4000000000000000537Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000450423%OSDRIVE%\TEMP\TEST.VBS01-0x26932a916c:\temp\test.vbs 800702000x4000000000000000536Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-10001268023%OSDRIVE%\TEMP\TEST.VBE01-0x26932a916c:\temp\test.vbe 800702000x4000000000000000535Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000908023%OSDRIVE%\TEMP\TEST.VBE01-0x26932a916c:\temp\test.vbe 802304000x1000000000000000380Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500492437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000379Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500492437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000378Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18492437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000377Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18492437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000376Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000375Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000374Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000373Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108437MicrosoftWindows.Client.WebExperience135CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTWINDOWS.CLIENT.WEBEXPERIENCE\APPX\424.1301.170.00 802304000x1000000000000000372Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108425Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1100.416.00 802304000x1000000000000000371Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108425Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1100.416.00 802304000x1000000000000000370Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108425Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1101.416.00 802304000x1000000000000000369Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108425Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1100.416.00 802304000x1000000000000000368Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108425Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1100.416.00 802304000x1000000000000000367Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108425Microsoft.Windows.DevHome125CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.DEVHOME\APPX\0.1101.416.00 802304000x1000000000000000366Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108419Microsoft.ZuneMusic118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.ZUNEMUSIC\APPX\11.2401.2.00 802304000x1000000000000000365Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108419Microsoft.ZuneMusic118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.ZUNEMUSIC\APPX\11.2401.2.00 802304000x1000000000000000364Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108419Microsoft.ZuneMusic118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.ZUNEMUSIC\APPX\11.2401.2.00 802304000x1000000000000000363Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108423Microsoft.WindowsAlarms120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSALARMS\APPX\1.0.189.00 802304000x1000000000000000362Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108423Microsoft.WindowsAlarms120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSALARMS\APPX\1.0.189.00 802304000x1000000000000000361Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108423Microsoft.WindowsAlarms124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSALARMS\APPX\2022.2401.9.00 802304000x1000000000000000360Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108434MicrosoftCorporationII.QuickAssist130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTCORPORATIONII.QUICKASSIST\APPX\2.0.28.00 802304000x1000000000000000359Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108434MicrosoftCorporationII.QuickAssist130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTCORPORATIONII.QUICKASSIST\APPX\2.0.28.00 802304000x1000000000000000358Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-5001108434MicrosoftCorporationII.QuickAssist135CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTCORPORATIONII.QUICKASSIST\APPX\2024.131.33.00 802304000x1000000000000000357Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108419Microsoft.ZuneMusic118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.ZUNEMUSIC\APPX\11.2401.2.00 802304000x1000000000000000356Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108419Microsoft.ZuneMusic118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.ZUNEMUSIC\APPX\11.2401.2.00 802304000x1000000000000000355Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108419Microsoft.ZuneMusic118CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.ZUNEMUSIC\APPX\11.2401.2.00 802304000x1000000000000000354Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108423Microsoft.WindowsAlarms120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSALARMS\APPX\1.0.189.00 802304000x1000000000000000353Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108423Microsoft.WindowsAlarms120CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSALARMS\APPX\1.0.189.00 802304000x1000000000000000352Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108423Microsoft.WindowsAlarms124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSALARMS\APPX\2022.2401.9.00 802304000x1000000000000000351Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108434MicrosoftCorporationII.QuickAssist130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTCORPORATIONII.QUICKASSIST\APPX\2.0.28.00 802304000x1000000000000000350Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108434MicrosoftCorporationII.QuickAssist130CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTCORPORATIONII.QUICKASSIST\APPX\2.0.28.00 802304000x1000000000000000349Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-181108434MicrosoftCorporationII.QuickAssist135CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFTCORPORATIONII.QUICKASSIST\APPX\2024.131.33.00 800504000x4000000000000000534Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001285671%WINDIR%\TEMP\SDIAG_6E87A57A-6854-4D31-B03D-DBAF07C2AE73\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x24039e373C:\Windows\TEMP\SDIAG_6e87a57a-6854-4d31-b03d-dbaf07c2ae73\CL_Utility.ps1 800504000x4000000000000000533Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001285681%WINDIR%\TEMP\SDIAG_6E87A57A-6854-4D31-B03D-DBAF07C2AE73\TS_DIAGNOSTICHISTORY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x24039e383C:\Windows\TEMP\SDIAG_6e87a57a-6854-4d31-b03d-dbaf07c2ae73\TS_DiagnosticHistory.ps1 800504000x4000000000000000532Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001285671%WINDIR%\TEMP\SDIAG_6E87A57A-6854-4D31-B03D-DBAF07C2AE73\CL_UTILITY.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x24039e373C:\Windows\TEMP\SDIAG_6e87a57a-6854-4d31-b03d-dbaf07c2ae73\CL_Utility.ps1 800504000x4000000000000000531Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-5001285672%WINDIR%\TEMP\SDIAG_6E87A57A-6854-4D31-B03D-DBAF07C2AE73\TS_WERQUEUE.PS1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x24039e374C:\Windows\TEMP\SDIAG_6e87a57a-6854-4d31-b03d-dbaf07c2ae73\TS_WERQueue.ps1 800504000x4000000000000000530Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-5001285681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_AFBYRCMT.Q4Q.PS101-0x24039e374C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_afbyrcmt.q4q.ps1 800504000x4000000000000000529Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500563681%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_FML45F4J.SXN.PS101-0x24039e374C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_fml45f4j.sxn.ps1 800504000x4000000000000000528Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{ed97d0cb-15ff-430f-b82c-8d7832957725}26(Default Rule) All scripts53D:(XA;;FX;;;S-1-5-32-544;(APPID://PATH Contains "*"))S-1-5-21-2580137126-784882126-1858780351-500770881%OSDRIVE%\USERS\RESEARCH\APPDATA\LOCAL\TEMP\__PSSCRIPTPOLICYTEST_1XTOVA2S.0JC.PS101-0x24039e374C:\Users\research\AppData\Local\Temp\__PSScriptPolicyTest_1xtova2s.0jc.ps1 802304000x1000000000000000348Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500212419Microsoft.YourPhone119CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24012.92.00 802304000x1000000000000000347Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500212419Microsoft.YourPhone119CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24012.92.00 802304000x1000000000000000346Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500212419Microsoft.YourPhone119CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24012.92.00 802304000x1000000000000000345Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18212419Microsoft.YourPhone119CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24012.92.00 802304000x1000000000000000344Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18212419Microsoft.YourPhone119CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\0.24012.92.00 802304000x1000000000000000343Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18212419Microsoft.YourPhone119CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.YOURPHONE\APPX\1.24012.92.00 802304000x1000000000000000342Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500438422Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.2.00 802304000x1000000000000000341Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-21-2580137126-784882126-1858780351-500438422Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.2.00 802304000x1000000000000000340Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18438422Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.2.00 802304000x1000000000000000339Microsoft-Windows-AppLocker/Packaged app-Deploymenthaagar4APPX{a9e18c21-ff8f-43cf-b9fc-db40eed693ba}39(Default Rule) All signed packaged apps81D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))S-1-5-18438422Microsoft.WindowsStore124CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWSSTORE\APPX\22401.1401.2.00 800504000x4000000000000000527Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007240104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2cd8fda113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000526Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007240104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSM1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2cd8fda113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psm1 800504000x4000000000000000525Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007240104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2cd8fda113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800504000x4000000000000000524Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{9428c672-5fc3-47f4-808a-a0011f36dd2c}56(Default Rule) All scripts located in the Windows folder57D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%WINDIR%\*"))S-1-5-21-2580137126-784882126-1858780351-10007240104%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\MODULES\MICROSOFT.POWERSHELL.UTILITY\MICROSOFT.POWERSHELL.UTILITY.PSD1065O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\\\0.0.0.000x2cd8fda113C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Utility\Microsoft.PowerShell.Utility.psd1 800702000x4000000000000000523Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000724024%OSDRIVE%\TEMP\HELLO.PS101-0x2cd8fda17C:\temp\hello.ps1 800702000x4000000000000000522Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000724024%OSDRIVE%\TEMP\HELLO.PS101-0x2cd8fda17C:\temp\hello.ps1 800702000x4000000000000000521Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000352823%OSDRIVE%\TEMP\TEST.VBE01-0x2cd8fda16C:\temp\test.vbe 800702000x4000000000000000520Microsoft-Windows-AppLocker/MSI and Scripthaagar6SCRIPT{00000000-0000-0000-0000-000000000000}1-1-S-1-5-21-2580137126-784882126-1858780351-1000247623%OSDRIVE%\TEMP\TEST.VBS01-0x2cd8fda16C:\temp\test.vbs