⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.30
Server IP:
45.79.8.107
Server:
Linux localhost 5.15.0-140-generic #150-Ubuntu SMP Sat Apr 12 06:00:09 UTC 2025 x86_64
Server Software:
nginx/1.18.0
PHP Version:
8.1.2-1ubuntu2.21
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
bin
/
View File Name :
ntfssecaudit
ELF > I @ 3 @ 8 @ @ @ @ 4> 4> ) 9 9 R p) @+ @; @; 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd Qtd Rtd ) 9 9 P P /lib64/ld-linux-x86-64.so.2 GNU GNU T 0eݡ/ GNU T T em v ; U @ J % p " x * e 9 M Q V > u # { _ h Y n , E V g F " _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable __cxa_finalize __libc_start_main stderr fwrite ntfs_initialize_file_security __fprintf_chk __printf_chk putchar __stack_chk_fail __errno_location strerror ntfs_acl_owner ntfs_same_sid memcmp ntfs_build_permissions_posix ntfs_build_permissions read memcpy getc stdout putc ntfs_attr_size ntfs_valid_descr free ntfs_set_file_security fputs __strcpy_chk ntfs_set_file_attributes ntfs_sid_size ntfs_malloc ntfs_get_file_security __memcpy_chk ntfs_merge_descr_posix ntfs_build_descr_posix ntfs_merge_mode_posix ntfs_get_file_attributes ntfs_find_user ntfs_find_group ntfs_get_group ntfs_get_user ntfs_read_directory strlen ntfs_ucstombs ntfs_read_sds getuid getgid __realpath_chk strchr lstat strrchr ntfs_read_mapping ntfs_do_user_mapping ntfs_do_group_mapping ntfs_log_redirect adminsid worldsid ntfs_build_descr ntfs_free_mapping ntfs_valid_posix getxattr ntfs_leave_file_security ctime opterr getopt_long optind isatty exit fflush fopen fclose ntfs_home stdin ntfs_read_sii ntfs_sort_posix ntfs_read_sdh libntfs-3g.so.89 libc.so.6 GLIBC_2.3 GLIBC_2.14 GLIBC_2.3.4 GLIBC_2.33 GLIBC_2.4 GLIBC_2.34 GLIBC_2.2.5 B ii L V ti a m ii x ui 9 I 9 I 9 9 m : t : z @: `: : : : : ; @ @ ? ? ? ? ? ? ? , ? 0 ? N ? T ? Q ? R ? S X= `= h= p= x= = = = = = = = = = = = = = = = = > > > > > (> ! 0> " 8> # @> $ H> % P> & X> ' `> ( h> ) p> * x> + > - > . > / > 1 > 2 > 3 > 4 > 5 > 6 > 7 > 8 > 9 > : > ; > < > = ? > ? ? ? @ ? A ? B (? C 0? D 8? E @? F H? G P? H X? I `? J h? K p? L x? M ? O ? P HH HtH 5" %# h h h h h h h h q h a h Q h A h 1 h ! h h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q h( a h) Q h* A h+ 1 h, ! h- h. h/ h0 h1 h2 h3 h4 h5 h6 h7 q h8 a h9 Q h: A h; 1 h< ! h= h> h? h@ hA hB hC hD hE hF %- D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D AWL= AVE1AUIATE1UH=R S H8H Z9 9 r9 $ D$ LE1H, Ll# \ A.wH5 HcH>H H8A H 1Ay8 8 wn9fH H=p AHu= 8 8 볋 8 z8 { ^8 _ B8 릋 58 1뜃D$>$5$EDDD tO8 EtQ# 7 H81[]A\A]A^A_EHt D0A|$ t 7 Et 7 1H=& HH`7 H]7 w7 wSH HcH>H 1(MD) 1 E1 " E11ۋ{ t(Hj H U HDH5 16 HL H 9 HDH5 1 tvL%$ M$ f. IM9t@M$Mt1 @ I|(Ht M$H H uLIM9u4 H H8 L% 5 I<$tbHn L[ LDH 1+Eu t X! H= H= H H= HL%L H L LDHO 1I<$ :D9P Aܻ D) E1D) McH5 K\ H; HHm HE11F H[D)s |IcH5J HI| H HID H H8H1蓦 HE1=D9 蠄 E11%D)McE11K| X H 11H H5E E1H=v HZ H H H5 L 1Ic1HIt I| AL%j HI<$H2 1E1 HRL%< H IcE1HIt I| &H McE1K| H0M H E11H8D McH5F 1K| ǥ AMcO| L|$\ L(! Å 1E1n n H=t AE1E11D$$1H=y2 HHH- 1E1T HHIHuE E9< UM ʃt H5 11 1UMʃt H5 1{1 111| HHHHuHt>11t HHHHuH5 1_1 1U ME } H5- (t 1$0 1U M ʃt H5 10 1U M t H5 1x0 1UMt H5 1J0 111| HHHHuL9 11t HHHHuD 1H5 '/ D%q McK| E H5\ t IcHH Md IT ID D2HD$Ad AFE1<AE1H11 D Et1HA,uD Ada AAmD轜 eȃD$&Et<AD$'Et<ACD= H$HH< HH H$Dh1E1Dh E1E1DxHB1fD$ fD$ $ HD$AE1Ld$(AAd AL$Ѓ $ Ao Ag} Am D DDHD$HL$DXfq@ΉL$ A DXA L% Oc M>AA E1rAx pxmDdqЃL <1@wt{ @rtPe@t @,V<$ f T$CD AHHD fD@fPDH AЃwVи qЃ w#Ek EL AЃ w A 1:D :A fAt0fAA 1:DDɍDjA _@x;KDf T$ A - : A@f: DDd$ ,wDd$ kLd$(Et)|$& t"Ic\$ AHT fB fZB Et.|$' t'CT \$AHcHT fB fZB 11fu@u T HA9~8T ft#wfuT f uT ǁ 뵉} HD$fuE ' EL%4 I $%tU) H=9 HE1 A Au D DDs H= HH@' D$E9dE9[HbK=3* ~H= H& ÅZ H|$1 = 1H= HHLc H|$ HE1A $ E1 DLH5 1 ) 1 :H=) 1Hc LdAŅ 8 LH5 1eH H8) ) L%3 HL$H7 1 I<$I<$( L% I $tJ H=: DHLR LH5 L H=ζ {oL% HL$H 1 I<$A ]H H8 ( XdL%= I $_ H= A D$$8_HD$u E> D t6DH5 11H5 ۸ DEH= E1E1$ 1Dd$AH=' HUHH 1E1T HHIHu11T HHHHuE9AwA9 E DEE H5^ 1DT$ & DT$ 1҃=& ~ E? DEE AEAAt DH5ݶ 1r& 1DEEAEAAt DH5 19& 111| HHHHuHt>11t HHHHuH5e 1 % 1DE EAEAE X A0t DH5 1% 1DE E AEAAt DH5U 1Z% 1DE E AEAA t DH5 1e % 1EMt H5 15$ 111| HHHHuA9tA11t HHHHuD 1H5\ $ 111| HHHHuH9tDA11t HHHHuD 1H5 d $ 111|, HHHHuH 11|, HHHHuHI I 11t, HHHHuH5 1# H= HD$Dd$8_u E $D t8$H5 11D H5 iE DE= Dd$L- E1$ D$ $ $I= I} t,$1L= D$ E HH4 L2 H5V LO1A A A A AeH H 1IE HD`AAԅGDPEttAH DщL H5 LE1H=r %IE H؋H H1H5T A 1H5G A 1H51 A1H5 pAL 1WH= X = H= ]|$ Dd$tEt'DH5 1H|$1 H= H= 1A H5 0H= T$ T$ iA1E1T HHIHuAF= , 1D Dt$H5 :DDD$H L,M AHIAEʃ ЀAE 11t HHHHuEEA9t?11t HHHHuD 1H5 D 11t HHHHuME L9t=11t HHHHuLH5 1% 11t$ HHHHuEEL9 11t$ HHHHuLH5 1E1 q ]H= A8DH5 DHD$^5 HD$H L,M:E1D1E1T HHIHuDH5 1 H= . 11t HHHHuAUA11t HHHHuIU 11t$ HHHHu=% AUA #DH5 1_IU 1H5 HAU 1H5 1u A{$1E1T HHIHuAE= DH5U 1E AHg J H AHHCʃ ЀC? 11t HHHHuDCA9t?11t HHHHuD 1H5 , 11t HHHHuLL9t=11t HHHHuLH5{ 1 11t( HHHHuDCL9d 11t( HHHHuLH5i 1E1 Z H=g r 11t HHHHuS11t HHHHuH11|( HHHHu=n sA uLE11t HHHHuA1E1T HHIHuH5 1dS 1H5 NDH5 16 E1dD1 H J HtPf. 1I^HHPTE11H=s f. H= H H9tHV Ht H= H5 H)HH?HHHtHE Htf D =u u+UH=" Ht H=F dM ] w ~,1HT HGH9u 1ff. fH11T HHHHuAE1tkGHHcD>AEAtJ 1E1A fAHcDHEE˃HcɃH A9uED @ 1f D HJЃ wHȍJЃ vJw D @ JwD HE11f D A ЃHPЃ vPwWA D Pw7A 뻐Dff. 1 N199 9 I DB1A)HcH B vDt?+wIr4AЃ vLAvDA1I9t* @ Hu I9uf I9tH노 1ff. H O Wʃ9E Hc)E1E1HHE1H|H5d @ fx w)PHcH> P A HH9uD PHA H9u PH p A H9u D A PF DD)كA HAH9TfPH8A H96jA PF DD)كA HAH90 G1ɍP9E1Df E1Ht9t Df D DOD;NuO;NuHcG ;F uVf9WuVf9Wu1A9~=fDTfD9Tt E1D D\fD9\uDD HD;DuA9ō9~*Lf9LuLf9LuL H;Lu9A Gf SH 8 H={ H H H=g H H=b H H=Z H * H= H H= H H=* yH ! H= `H ) H= GH ' H= .H 7 H=¥ H ' H= H = H= H + H= H @ H=. H ; H=] H " H= H . H= fH - H= MH < H= 4H , H= H H= H 8 H= H " H=5 H 3 H=D H @ H=c H ; H= H [2 H= kff. ATSHH= t*HX H=0 H/1H[A\IHHK HtnH 8 H:u<HH L L H LD1 H8 H=, 1sH L 1Hl H;H;L H. 1w13AWAVAUATUSHT$ FH<$ L-B L%: D$ T$Ds 1H5# 1D H5 D9~:L<$ D9~(ALA IE1AIA9~ӿ H$;\$ oH[]A\A]A^A_AW1AVAUATUSHHcIHL;H(= l;HT$E1D@ D$GHHf IHIH9uH;8HD$ Ic En11HT$ THHHHu߉؉D$ AD1E1HHHHIЃ uIx Hn I L$H@ H HcH> I6 H @ Dl$ 1t$AH5 D2HD$DDLD$H5 D1 1L H5ِ % EnIcE1L- HIf D L1E1HHI uLL 1AID9Ŀ E1wHD$LD$H5d L$T$ D1^L 1H5 L%/ AH1E1HHI uLL 1AHD9H( []A\A]A^A_1E1HT$ T HHIHuH I L$T$I! I" I H5 1pHD$LD$L$T$DbIO M Iu H Dt$ 1t$AH5Ҏ D HD$DDLD$DH5 1L 1H5 HD$T$H5 LD$L$ D1L 1H5 vHC HcH>L$T$ 1H5c NT$H5 12 D HL$T$ 1H5 HtrHL$T$ 1H5 `H5 1HH5 10H5 1L$T$ 1H5 mT$H5 1QL$T$ 1H5 1L$T$ 1H5֠ T$H5 1T$H5c 1dT$H51 1HT$H5 1,L$T$ 1H5O L$T$ 1H5 aL$T$ 1H5 AL$T$ 1H5 !L$T$ 1H5} L$T$ 1H5O lL$T$ 1H5 LL$T$ 1H5 ,ff. UHSH= LI uKH=i 11T HHHHuHKH[H< ] H5 1ڿ ff. UHSH= LI uKH= 11T HHHHuHKH[H ] H5 1ڿ ~ff. AUE1ATUHSH=g AGlm H=V AdA)DE DDH5D 1]EDDH53 1A> q H { ǀJ C 1E1T HHIHuDDH5 1 ,1E1T HHIHuDDH5 1 1E1T HHIHuDDH5É 1 1E1T HHIHuHDD [H5 ]1A\A]t @ DH5] 1ڿ V ADD H5k 14 DDH5# 1 f. DDH5Ü 1 gfDDH5k 1 >fDDH5 1 fDDH5˛ 1 fDDH5 1 gfDDH5; 1 GfDDH5 1 'qfDDH5 1 HfDDH5 1 fDDH5P 1 fDDH5 1 fDDH5چ 1 fAWAVAUATUSH(dH%( HD$1H DoHL5 Dg H= L-R aD 1H5 H5 1 D 1H5 H5 1 S 1H5 H= S 1H5s S 1H5l A/H|$1D$H|$ HDAHfD)DD9AOHcHt ~Nf@% AD$ AfAEAArDD$AAfAEAAwfDD$ൃxD$D9(L f w+ft&f w IcL L> D Lԅ f v Lڅ t$L1AW LcN LXZD;|$HD$dH+%( H([]A\A]A^A_ÐL L Lh L^ t @ L2 D$ LR f fɃẃsL$f ff% ḃufL$ƃgD9D$HԄ LO L̄ @ HD$dH+%( u,H(H=d []A\A]A^A_f D L Off. @ ATISH18u H[A\ H LIH 1 u&HL' [H=] A\f D uHL. [H=Z A\ff. AW1L=Ԅ AVAUE1ATUSHHAq E1AuX1T HHHHuHHcIHHMt} H[]A\A]A^A_ D T HHIHuMcL A IAl$ID$Mt$E1f D IHII9u= A $LL$L L 1LL$1Lʿ H5 ytMEH-T Md f D L1E1HHI uLH 11IM9uȿ A1AE1 D T HHIHuMcL A IH5 1LL$ Lӂ A ff. fAW1AAVIAUATUSHh= T$TVݍ|@ FHc҉t$PHAAA|$L l$DD$HcH5H E1Dd$\EDH5I 1AGAWDHHcҿ AAH5' D<1ED|$HA E C{D$ A)|$XAD$ A))T$ @ D$PL$L E1D$D$ H5 DD$ T$DAD$ 1/HcD =- HD$ H5 ALD Gdd HD$HD1DD<~ < N H5 1HD$ DD H5~ ED1DDD$Bبe D$B: D$B D$BD$C D$B D$B@_ |$B x |$ H5 D1DGHI G HDH\$(LHD$0 A1Ht$1T HHHHuADD H5! 1LD$8謿LD$8DDH5 1E芿T$T 0 J @ À A1DDAH5[ A Y - } Q % @ l$ DD H5 1AnL$XLH] DD H5h 1@HD$ 0 <I ' @ D$B uy|$C ºHD$(|$HHD$0T$ ЉD$9|$ } 9D$\6Hh[]A\A]A^A_ 1H5 uD$B t1H5 [|$C tH5 1=HD$ 1AD D$ 1McAT HHHHuHD$ LLIlH 11AT HHHHuLLH觻H5 螼f h T$1DH5~ AÀ T$1DH5~ T$DH5} 1 f D 1DD H5| ϻ|$B DDH5| 1 諻jf D DDH5| 1 臻0fDDH5s| 1 gfDDH5+ 1 GfDDH5| 1 'fDDH5{ 1 }fH5'~ HD$ <H5 ~ 1̺ 1DD H5} 觺DDH5} 1 膺DDH5M} 1 gfDDH5 } 1 GfDDH5| 1 'efT$DH5| 1 8T$DH5| 1 T$DH5R| 1 ƹT$DH5!| 1 覹T$DH5{ 1 膹H5z of. H5y 1M H5y 1-m T$1DH5 { ~T$1DH5 { dT$1DH5z JT$1DH5Vz 蝸0T$DH5Az 1 z D T$DH57z 1 Vx 6ST$1DH5y &T$1DH5y T$DH5y 1 T$DH5dy 1 辷Zf T$DH5/y 1 薷)T$DH5x 1 v w Vgr FKH5z ?Tf. AUATAUHSH=' @11| T HHHHuAt0ulH=~ HKD[DH]A\A]- D u HH= z []A\A]γf D @H5r 1ڿ } @H5dr 1ڿ ]t AUATAUHSH=G @11| T HHHHuAt0ulH=z (HKD[DH]A\A]M D u HH=Wz []A\A]f D @H5q 1ڿ 蝵 @H5q 1ڿ }t ATUHHH1AH1H1@DH1HDH1]A\ff. @ AVAUATUHSDoDwIô= Iu7= t^LALHH= 覴IMtb[L]A\A]A^fDHHRuH= ±= uf H LALHHxDIMuH= 耱[L] A\A]A^ff. fAVAAUATUHSDo_I= Iu'LDLHvAąx/[D]A\A]A^ HH胰uH= 뺐H=1 [D]h A\A]A^Ð H?aHff. 1H 9SHHHH v- H)H5 HH蓲[ Hu[f AWAVAUATIUSH dH%( HD$x1D$ Ll$ $ E1*f D tB\< AG LcAP L贳Ã tAHuA DL A d D$ AÃ<$} D$11H HHHHuI9u E- E$ $ A9" LcD $M L׃ I H ADADA9D $H5u 11趱Ld$H R f. Ed- H3HD蛰A9DLd$f D Eu; LA lÃtH E1H0QEt @ HD$xdH+%( HĈ []A\A]A^A_fHcLD$ L$ 9 $uEb D EAfE1,11H=u HHHHuI9\11H=J HHHHuI9-11H= 4 HHHHuI9H= D\$DT$E;$DT$D\$H= D\$ DT$H= H5Ps 1ȯH= H s H5=s D$Hs HD1葯4$H=G BDT$D\$ H=# D\$D$ H= H= 3t$ H= t$ H= H= ]t$H= H5r 1خ= D$D\$u $ t$H=n D\$D$D$D\$HHtDT$H$ H<$GD\$DT$$ 3H= D\$D${ D\$D$<$A ff. UH- SHcHH| t H[]f D ~HD HtH D @ H H@ H9uH[]f AWAVAUATUSH H $ H H $ H dH%( H$ 1D$@ HL$` D$ D$,D$< D$$ D$ D$( D$ fA10f D A tD ` CA Hc HޭAă tEDHAuD$ A DLAD$ 5 T$ t$S t$H=5 L$,L$2 = S H= L$rH= $H5o 1 H= CHo H5o D$H^o HE1 H= g H= 6 H=z t$ H=e pt$ H=P ;t$H=@ KH=4 D$T$1 H5o T|$ I L$< D$ D$ AD9 McDT$MLA I 0H5 ADADD9 DT$3 A tX|$ tQDl$ 4 Et D=L EtHH DH0襩A H蓫AăuA HcӍCƄ` D$t:Dl$H_ IL)f @ HH9tP t tH hash : I3FHComputedI3H u fA~0xuH$r D$$ H key : 0I3FHSecurityI3H uA~xuH$q D$(Hattrib :I3FHWindows I3H u fA~ 0# Eu.A>File HDirectorI9NfA~y AD\$EtODT$$EtEH= `@ H HJH 1HBH9u9D$$ |$@ ; t f D$(= \$(L%Y HcIH D$(HH D Et |$, D$ Ll$@DD$E Ht<H= 膧IHt!H= kH5 LzLcH H=0 L = tC=v t |$ H5 l 1ҧHs LH0 覤D$<E T$<1 H5k 葧H$ dH+%( HĘ 1[]A\A]A^A_f D IcL%D$ N t$ 9t$ Z A t |$ NƄ$` D D$ E1E A>File Ll$@H$j L蹦D$ D$$ D$,D$( @ H5cj 1荦CHl$0L-& D$Ha \$8IL +Iu H^L9uA\$8Hl$0A t |$ fHcƄ` |$(IH`1f1T$ uD$ ) D$ D$ @ Ht HKHH5z 1裥HD LH0 w@ A~ A~xH$s D$, A~ JLl$@H$e D$( LD$ D$$ D$,f D H=y T$,H= Ll$@LHD$ 3H5y 藤L%8 LI4$T$, 1H5h mI<$$ݾ D$ H5jh ?H LH0H芢 H;H5,y 1 )|$ t$H= 蠢D$=m k踡D$ D$ hE1&ff. AWAVAUATUSH Ht$HT$ L$LD$pLL$xt@)$ )$ )$ )$ )$ )$ )$ )$ dH%( HD$H1H|$HM H|$ D$(HL D$,D|$C| HcIH. 1 @ fDxfHH$@ HD$8HD$PD$0 D$40 HD$@E Lt$E1A D$ HT$@pljt$0D :/ D@L42DD$0A/ xF|$0/ HD$0LD"DL$D$D$DcLHcDL$H{BDCHfCEAA l$D9|$t?D$0IcH\$/BHD$8DHPL2HBD HPHBHD$8jfLt$Ht$IF HtHcT$(IcL虠EnHt$ Dl$(HtHcT$,IcLvEnT$AF 1u@t$,AFLD轟tyHD$HdH+%( H L[]A\A]A^A_D$fAF H|$ D$( 1HD$, 1苝 H=d 褝LE19" d D D$ A @HT$8HT$8HD$8fAWA AVAUL- ATLIUHSH H= dH%( H$ 1H\$8D$< ID$8 11I} HHHHut$V 1E1E1fT$LL$<H LH=z A 跟u#= D$< E E h E ILLH=1 A D$8 a) L$<DD$8FLA . A E E ILLH= A D$8 Z \$<Dl$8Ft+A o 1E1H5)t dݸ H$ dH+%( HĘ D[]A\A]A^A_Ð HcA LHHt$fD$ Ht$DAuHcH|$@D E1[ @ |$8 = H=Fs ٚ" D$E|$<IcHt$@|$HŜEUL$AΉMЋT$Dt$< fEs @ |$8 H=a V Et$<HʛAŅ Dl$< D LH5a 1E1 לP n H=La AAPDL$(H51 J| DD$L$,LT$ ՛DD$DL$(A LT$ L$,LIHEӶ Uȶ MMDU% DL$<E fEq AUH5 H| HL$DAvfHL$HHHE S U M ME]Dt$< fE H=q Ę 1111f D E1111LH5Hq 1T C AWH` AVAUAATI UHH5` SHH_ HD1H LH0PDEE[ ɗL5R LLuH1[]A\A]A^A_fDL=> I- Mt͋}u E7 HL蔚LH9 ; Ht5Դ LD=δ I 6M HHIܖ, =1 LMDHH= 诘IHĖM(L} Ņ H= L L̙A E LD$ oD$ H[]A\A]A^A_ @ U H5;] 1r D H=6^ 茖L u L譗u9 L H= ^ DH Lȕ5 'H=] 1WfH=] L5=N LЗ L1ID HQH9uH5] 1^1L1L1L@1DL1DLNH1 LMDHHx贖I @ H=\ LH5m 1ʗHk H8{t 115f D AWAVAUATAUHSH8 & dH%( HD$(1 =w H=r LL$$HA H ű D$$ 蓗H=D HA1AŃ A E = EH[ H[ HDH5\ 1輖H ] HH3 H=\ ΓH5m 1苖H3HT$$ 1H5r\ iH;! ' D EH[ H[ HDH5[ 1(H ɭ HH3v Z DH HH H AHHCf = fCtVn =@ uDEHbZ HQZ HDH5K[ 1tH HH0 HK1DH5@l 8AN =7 5 H{ EHY HY HDH5Z 1H HH0.H{HS HL1 @ HBH9uH5dZ 1脔Q D E =q EH!Y HY HDH5 Z 13Hԫ HH0聒AF= b A DH5Y 1L-K HLADž AF k D$ = D DHR HH H E IL C u[ DLٽEp H AWHHH 1 HPH9uH5V 1DLÑ DLE1IHtD8H= H=l ~P1= LD$@<LLDL[DL.D$tH5MX 1`L(=e H H=) Aċ5 L== K H= 跒Ń= L `EDH5h 1Mt)= tENE: AF/ L臎D Eu = ut|$ wjHteCfAfCf% D fCI AF= 1 DH5g 1KL- HLADž HD$(dH+%( L H8[]A\A]A^A_ H=XV , = } u = qDH5JV 1趐DH5CV 1蚐J D L AFD$ D { Eu^1ۃMf D H=g t H=U T H b @ 1[EDH5Lf 1 H= 謍1҅IЉf D H= <1҅IAd D DHD$L$wHD$H L$H H=k GH= U t EHS HS HDH5T 1H HH0^D 1H5T DH5T 1ʎ D u<f D ELLD$8E HOS IHOS H5FT HD1mH HH0軌ELD$~xH AWHHH 1f HPH9u1 LD$H5S MzHT$LL@Lsa 1117ɋf ATHH UHSH dH%( HD$1H|$HH= H$ O Ao8tRHH5uS 1TH H8 HD$dH+%( H D[]A\f D 1Hn t D% A H=U A H+e t= tXH=U ܉H,$E1 HtH}HH$DEH H$IH,$HuA) H=jR 脉fH=ZR t:f. ATIHD UHHH(dH%( HD$1H|$HH= H$ 轉} 8tKLH5Q 1ŋHf H8vo HD$dH+%( H(]A\ 1HLCuLH5Q f D HLtՃ=] tKH=BT oL$$MtI|$HH$LH H$L$$MuY H= Q $ff. f AWAVAUATUSH(dH%( HD$1~fIIHE11LDF1 f $f=wf1HL9t(ft u ufwJHL9uf D t|HD$dH+%( a H(1[]A\A]A^A_ @ f=w D f=v$f=w qf. f= Uf D Mph'fA<$.u RfA|$.Ef M}HcLqH|IHHHHIVLHHT$蠈B|3/HuUNt3HT$L Lt$'1҅HHA IE I] Hf mf D / fB1Lt$چf. AWAVAUATUSHX|$ H=N A ԅH= D H5 )Aă D$ DhE DDH5_ 1 S D$H D$$ D$ |$ L$HT$$A 1H5b 1 \$H5N 1HX[]A\A]A^A_H=(N E1!8_KDH5_ 1衇1뵋L$HT$$A 1H5b |2 o|$ D$H L% D$$ Mt$D$ D$LD$( 11A HHHHuk\$ H= AOL芄= AōCD$ D;l$[ H 11H\$HHHHЃ uHu.1Lՠ A4 HHHHuH L蔅9D$ L9D$v(LnH5` 1H% DLӄI 1|$ ~1D$HK HJH 1 HBH9uH5 11HHH׃ u9 A11HHH uLH5] 1w0 H=_ 蔂D$ H5] 1;D$1IcD H5\ D;l$ 5 7T$H5ZK 1 DLW E LD$0H5:K LLL$(豄LL$(LD$0H 11HHHƃ uH D$$1E1A HHIHuAEE= ER 11HHH uH0 E1DL$= LLD$)H]G H5J AHOG HD1σ1LU1L+1L豶1DLt1DLGLDLTH5*G 1oLD$11A HHHHuH|$t$(A1Hfo )@w 1A HHHHuAGHt D)L$ D tD H5\ 1謂Ht$H= D 3R=# tH5\ 1lD$ D$$ D$Hr!H= yH5JZ 14L U9D$L@H5\ 1Hp {Dҿ 1LD$H5[ ЁI LD$E1DxD =< ~H5)H 1腁|$ H= A HH1E1 2HHII9uI EM9] 11 @ 7HHHI9uL 1E1 HHII9uLLH5nY 1 LL$0Հ LL$01E1L A HHIHu=: D~0H5XG 1LD$@LL$8Dl$0sT$0LL$8LD$@9T$(L$(DH5X 1 > 1HHE1 2HHII9uEM9t(11 7HHHI9uI=t Lʿ 1LL$0H5iF LL$0L1D H5mX DLD$0Dl$(DT$(LD$0H HHk EIIŃ|$ T$H 1HHHHXH9uA}@ AEE19t.H5W 1LD$~LD$ A MU 11H 4 HHHHuI9tX1E14 HHIHuLLH5W 1 DL$LD$g~DL$LD$ AEU11A HHHHuI9Y 1E1A HHIHu LL1H5hW DL$LD$}DL$A} LD$A H=U zo :1A HHHHuHD$H |$ A]1E1H 4 HHIHuMM 11A HHHHuAuDL$L\$ S A}DLD$(H LD$(HHjA}H=nV LD$yA}LD$c 01v AWAVAUATUSH H $ H E1dH%( H$ 1HezD${H5 D$1 HHIHuL-} IcE1AD$IuHL>L HHHI9uL G 11E 9D HILHuCLcA1HLLf D D8HHLH9uC<uBAu<Hu6Hu0Ez1ML= 1AT HHHHuHt_H5B 18{Hْ HH0yH=W Jx H$ dH+%( H []A\A]A^A_AF1Ot D$ 1AT HHHHuHiH=A LL$wH=U wT$LL$ H5A 1szLL$A 1H5A A NzMcH\$L=(8 MMHl$LD1E1 HHIHuLL 1yHA9u¿ H\$Hl$vT$r H5@ 1yA 1H5@ yLcL$ C \$ Hl$DL$MML1E1T HHIHuLL 1MyAHD9u Dd$Hl$ vA 1H5P@ y\$ 1E1AT HHIHuLL 1xAID9uH=@ uH=S u|$ |$ H=cT uH=T H$ uH H wLd$ HHu%y / HvIHD$(MtcHt%LH w/ HpvHtH|$(uH5\? 1 xH HH0NvH=D? u1Ht1H=R tH5S 1wHP HH0uH=> tH=S tH5> 1LL$hwLL$H5> 1KwAuAUATUSHdH%( HD$1H H H D$ HvIH: HHvuH / LuHH g fo^ 1LfC1CppinvD$ LIsH=Ht$s|$HtH HtHH`sHn He H- H HHrHuH H / L8tHI9 LrH=UR r} / w |$ 3L-ō LsLcLrHHvLLHt( rHHR( rH?C H Hk@ H HhH H ' 1HHT$dH+%( u`H[]A\A]1H=gBrH~H=Q q E1 1L Q H52< H=/ q{rf D AW1H=m AVI AUATI M@UHև'#mSH H fo[ dH%( H$ 1H$ H !$(L$ H$ H\$`Ld$hHl$pDŽ$ D$x H$ )$ H$ HշJOH JlBmH$ H H5 I H$ H J_I H H$ H: _xlI I H$ H H$@ H H$` H H$p H@ H$ H$ H$ H H$ H$ H$ H$ H H$0 H H$ H? L$ L$( L%#, H$ DŽ$ DŽ$ DŽ$ DŽ$ DŽ$8 H$H H$P H$X L$h L$ H$ H$ H H$ H$ H, H$ H H$( H H$ H$ H$0 H H$@ H H$8 H H$H H H$ H` H$H H H$X H L$ H$ H`L$ I L$ I H$P H H$` H H$0 L$ H$ H$ L$ L$ L$ L$ L$ L$@ H$8 HDŽ$P HDŽ$h H$p H H$x H- H$ H H$ H H$ H H$ HH$ H$ H$ H$ w IcL>1H= L5Y7 H$@ H$ L$ HTnIM 1L~IH HHWu<nlL H57 1VoHΦLֹL辦 LkLk 6A Dl$D$DxA H( DHcH>kL E1H5+7 1nHB1H= L5u6 H$ H$ L$ H@mI1H=g L526 H$ H$ L$ HmI1H$ H$ IHH= lL55 I|Hօ H$@ 1L$ HH= L55 HlIBH 1H$0 H= HL55 HIflI 1H= L5n5 H$0 H$ L$ H.lI1H=U L5P5 H$ H$ L$ HkIA H H$ H$ h jL1vHXZHtUE1A A DH譸9tEADH5I 1 lHFo Hwi|$ D$DHwIHt1H L$ՐAAF t$ 8 A9u D9,$uE9taADH5^I 1 D\$l$D H5sI 1kT$D1H5I kHjLRLhH$ w D<$ H$HL$`HL$AAu"H$ HD$AtH7 H HD$HD$`HD$AtH H HD$Hl | D$$ 1H$ H ^ n H$ H$ H$ HHa Hq H$ H[`yH$0 HُM H$8 H t H$@ H h H$H H @MOH$P D$ D$( D$0 D$8 D$ [HiH*iO DH5>J 1 Jj t?= w6HL$HT$D=jHHuDH5I 1 iDt$DT$0H(\(H5G EKHHHIHIHHHHH1HHHH DAHLI)LI1siH$ D9t LH5G 1 Ki H$0 D$89t H5G 1iӣ Dt$(DT$$H(\(H5G EKHHHIHIHHHHH1HHHH DAHLI)LI1hD9t LH5F 1 ~h7 1 ;l$ t(T$ H5F 1 Rh H$H $H yH$ HD$(H$ HD$P=Ϣ D HD$(HL$`HL$\$L\$ u H$ H\$tH HH\$HL$`HL$0tHq HH\$0H0 0, H m H \ HDŽ$ H$ Hd dP H$ H H$ H? H H$ Hͦ`|/H$ HZ vQH$0 HpD~H$8 H HH0 [H$@ HƮd hH$H HY-8H$P HdRUH$ H$ H$ H H$p H Wh gDH$x H~XH$ H,@RHDŽ$ HDŽ$ H$ H$ H$ HDŽ$ HDŽ$ HDŽ$ HDŽ$ HDŽ$ 6 HDŽ$ HDŽ$ 09 HDŽ$X HDŽ$` HDŽ$h H$ H8._" H$ H$ vHDŽ$ HDŽ$ HDŽ$ HDŽ$ H$ HDŽ$ HDŽ$ 4qDŽ$ DŽ$ \$Kg 5 A A A f$ DŽ$ DŽ$ DŽ$$ f$( DŽ$, fD$0 DŽ$4 fD$8 DŽ$< fD$@ DŽ$D D$$ D$< E1D$D D$@ B D$ D$\D|$ f. fD$2 D$fD$B f$: LD$0HL$L$ H= T$ LbHH@ H(cHb~ H=_C aH=+ `LFH=+ `t$ HyH=, `V H^`;\$$~h$$9D$$}PAAu4AAu'D$D$ D$A D$\D$XE1D$X$ D D$8<$t tD$8|$K $ D$f$* $fD$: f$B f$2 D$fD$R f$J D|$AA2Dt$DDT$@ H(\(DHHHHIHIHHHHH1HHHH4DAHLI)H5A I15bHc\$L D9t H5KA 1bȜ 0 \$<9t H5~@ 1a HD$(HD$(H9D$PH= )_=r H$ dH+%( H []A\A]A^A_H` H= #H H 赓H 8DH DHȪEHDD$/`~#HHL1HBH9uD$8DHD$0踫IH D A9 Hx]ED H5t> 1`' u H5 @]6 EHDD$D_~#HHL1HBH9uD$<t$ HD$@ IHt4H\$ LLم L\N @ H=( ] 2 H=9? \H=' \L H=' \H=( \H=' \5 H=y> \H=R' \LЖH=H' t\ H觑H=:' [\ H H=,' B\t$ HѧH=r' %\Lm H=& \ ? <A A A A DŽ$ <DŽ$ f$ % DŽ$$ f$( DŽ$, f$0 $4 fD$8 DŽ$< fD$@ $D fD$H DŽ$L fD$P DŽ$T D$$ TH H$ h 1jA HPH L jh jPHau jh j01jh jHpHHE1A E1xHu L$ He A H0h j Vjh j Rjh j AQjh j Vjh j Rjh j 1 A [A Hİ A HH+A Hpt L$ H5 A H h Aq A jH$ RHjh j Pjh j Vjh j AQjh j P1jh j Vjh j 衸H HMHs L$ H5' A HH h j Pjh j Vjh j AQjh j Pjh j Vjh j A 1E1Hs Aq H$ H$ j IE1j 0jjj H$ P1jjj Rjh j ȷHpHwH$ 11E1 A A H$ 芷H=A Hr H$ A A LHr h A j AQH01jh j &H0HA A L H A H$ h A jHAQjh jAQjh jPHe jh jPHq jh j01jh j艶Hİ H5H2Y Hs= gH iH <H 迌DH DHOLD$HL$DHH=k .XIHtHXHLQXt5H%VL VD H58 15YE1EHDD$(DXJ HHL1HBH9uDLD$ D$$詤9 HD$<ULUDD$<DH56 1X: VLW L= 2L L ĊL GDL DLסH=s7 FUeLTHTLTTL H5: 1WHOLW1Uf D AWAVAUATIUSH dH%( H$ 1= Ht$ V \$(H% H( H5 H-q @ HD1.WHn LH0|U T HLH5 WIŅW = HT$ H5p LzWHB H= Sm DHbUAŅ L=x E1L @ LA8DHÅ: SIHt= ~OE1=V HAADÉDH蘈DH DDHߞDDH豟HYHU= H H= VAŋ54p H= k H= PV1AD H52, UMt A|$ AD$ L@RLE1R%TtHL 1A H5 >UH$ dH+%( Hĸ D[]A\A]A^A_H-ko H5 LHUHÅ~T= \ HSAŅ/ L3AH=h Qk hL !H=4 E1QC @T$ H5T 1gT H~DH8vH5 13TKH=J4 AJQ= ~OE1= HAAD脇DHYDHކDDH蠜DDHrHE1D 1H5f4 S^H=-4 PI F H}H[uH5 1VSqH=b %Q1҉хIH=H P1҅IAJQ ATIH= oSLH uH Hj H81SA\Hߍ f D ATIUHHPu01L |tOHLD$ pD$ %Hcj ! H=b3 H:S H]A\H-6j L 1H5 H} SH} ff. AVAUIATI1HdH%( HD$1iQHH$OIO L@{ LH52 1QLH53l 1AH D HH9t1HHtH fxH H9uHH9uH5Y 13QL/4OH i Hu: H=3 A QHD$dH+%( ucHDA\A]A^ú H=2 A QHh L H A H81QH9h H8INfAWAVAUATIUSHHH|$rN1 H߉yD$ j D$ H=m L=j FMLH |1 E1DH=^ D$$M fIH I9 IHtAE1f D I AI tILHftD@DH 1AA ~OH= 1HL4MŅuYL8 L覷H|$,D$H[]A\A]A^A_4MH g Ht H=U0 OD$ 뺺 H= OD$ DH5 1NuLH5 1NHFf H8VO D$ < HH llpmlPmlllmllllllllllllllllllllllllxx#w#w#w#w#w#w#w#w#w#wx|x`xstyTy4yysxxsssxsxxsssw<D<Ā<<<<<<<<<<<<<<<<<<<<<<<<<C}*uUHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH0H)KBK_KIIKL.LQL!ISSSRR:SR?R,RS ! local_build_mapping Usage: ntfssecaudit -t run self-tests ntfssecaudit -h [file] audit the volume read-only read-write "%s" opened %s Could not open "%s" A volume is already open %02x %*c %06x %*cNull SID %*cWorld SID %*cCreator owner SID %*cCreator group SID %*cDialup SID %*cNetwork SID %*cBatch SID %*cInteractive SID %*cService SID %*cAnonymous SID %*cAuthenticated Users SID %*cTerminal Server Users SID %*cLocal System SID %*cAdministrators SID %*cUsers SID %*cGuests SID %*cSome domain SID %*cAdministrator SID %*cGuest SID %*cDomain Admins SID %*cDomain Users SID %*cDomain Guests SID %*cLocal user-%lu SID %*cUnknown SID %*c%shex S-%x- %llx -%lx -%lu %*c%sdec S-%u- Owner SID O: Group SID G: Global header %*crevision %d %*cflags 0x%x %*c owner is defaulted %*c group is defaulted %*c DACL present %*c DACL is defaulted %*c SACL present %*c SACL is defaulted %*cOff USID 0x%x %*cOff GSID 0x%x %*cOff SACL 0x%x %*cOff DACL 0x%x access default USER UNKWN GROUP GRP-O MASK OTHER SPECL USR-O Posix descriptor : acccnt %d defcnt %d firstdef %d mode : 0%03o tagsset : 0x%02x version %d flags 0x%02x ** NULL ACL Error code %d : %s Windows group Windows owner Interpreted owner # %s S-%d- %*cACL size %d %*cACE cnt %d %*cACE %d at 0x%x %*ctype %d %*cAccess allowed %*cAccess denied %*cSystem audit %*cunknown %*cObject inherits ACE %*cContainer inherits ACE %*cInherit only ACE %*cACE was inherited %*cAudit on success %*cAudit on failure %*cSize 0x%x %*cAcc rgts 0x%lx %*cList directory %*cAdd file %*cAdd subdirectory %*cRead EA %*cWrite EA %*cTraverse %*cDelete child %*cRead attributes %*cWrite attributes %*cRead data %*cWrite data %*cAppend data %*cExecute %*cstandard acc rgts 0x%lx %*cDelete %*cRead control %*cWrite DAC %*cWrite owner %*cSynchronize %*cCan access security ACL %*cGeneric all %*cGeneric execute %*cGeneric write %*cGeneric read %*cSID at 0x%x %*cSummary : grant deny inherited applied to owner to group No DACL directory file Computed hash : 0x%08lx Estimated type : %s Interpreted Unix mode 0%03o ! Computed hash : 0x Security key : 0x Windows attrib : 0x File Directory to 0x%x ** Could not set the ACL of ACL has been applied to %d ACLs have been applied ** Bad sample descriptor No SACL ** No group SID ** Could not get owner of %s Directory File Posix equivalent of old ACL : New Posix ACL : == Windows owner might change New NTFS security descriptor Expected hash : 0x%08lx ** Could not get file attrib Security key : none Security key : 0x%x : key 0x%x out of range : no key : key 0x%x # %s hash 0x%lx Windows attrib : 0x%x (Failed) , partsz %d # # ** Could not access %s ** Failed to update %s Auditing $SDS-2 Auditing $SDS-1 Entry size %d bytes Entry at 0x%lx was deleted Hash 0x%08lx (correct) Offset 0x%lx (correct) Key 0x%x Assuming %s descriptor %d errors in $SDS-%c # User mapping proposal : %d:: user:: :%d: :group: ::S-%d-%llu -10000 , then # Example : /.NTFS-3G/UserMapping ** Not possible : ntfssecaudit.c sampletry1-a sampletry1-b sampletry3 sampletry4 sampletry5 sampletry6-a sampletry6-b sampletry8 input ACL NTFS owner NTFS group NTFS DACL Got back an invalid Posix ACL Could not get Posix ACL back ** Error in %s (errno %d) no gotback ACL (none) system.ntfs_acl system.ntfs_attrib Descriptor fails sanity check %s not found "%s" closed Could not close "%s" Could not open volume %s # %d security keys Could not open security API Recursive file check Summary files warnings were warning was errors were error was Unhandled option case: %d. Invalid option -%c Incompatible commands -abehHrstuvV Auditing $SII ** offset %d (instead of 20) ** size %d (instead of 20) ** fill1 %d (instead of 0) ** fill2 %d (instead of 0) Valid entry for key 0x%lx hash 0x%x offset 0x%llx length %ld %d valid entries in $SII %d errors in $SII Auditing $SDH Hash collision (not an error) ** offset %d (instead of 24) %d valid entries in $SDH %d errors in $SDH / Summary of security key use : Key 0x%x not in SDS-1 SDS-2 SII SDH Key 0x%x used by %d %s rb Could not open %s Bad ACL description 2021.8.22 ntfssecaudit %s %s%s ** %u %s signalled ** %u %s found Command failed No errors were found No errors were found backup extra help hexdecode recurse set test user-mapping verbose version display security descriptors within file ntfssecaudit -a[rv] volume ntfssecaudit [-v] volume file display the security parameters of file ntfssecaudit -r[v] volume directory display the security parameters of files in directory ntfssecaudit -b[v] volume directory backup the security parameters of files in directory ntfssecaudit -s[ev] volume [backupfile] set the security parameters as indicated in backup file with -e also set extra parameters (Windows attrib) ntfssecaudit volume perms file set the security parameters of file to perms ntfssecaudit -r[v] volume perms directory set the security parameters of files in directory to perms special cases, do not require being root : ntfssecaudit -u mounted-file get a user mapping proposal applicable to mounted file ntfssecaudit [-v] mounted-file display the security parameters of a mounted file Notes: perms can be an octal mode or a Posix ACL description volume is a partition designator (eg. /dev/sdb2) -v is for verbose, -vv for very verbose Versions of ntfs-3g and ntfssecaudit are not compatible Make sure "%s" is not mounted %*cRemote Interactive Logon SID %*c DACL inheritance is requested %*c SACL inheritance is requested %*c DACL was inherited automatically %*c SACL was inherited automatically %*c DACL cannot be modified by inheritable ACEs %*c SACL cannot be modified by inheritable ACEs %*c self relative descriptor %*c unknown flags 0x%x present ace %d : %s %s %4ld perms 0%03o %s You probably need Administrator rights You probably try to write to a mounted device %*cDon't propagate inherits ACE %*cObj specific acc rgts 0x%lx == Linux owner is different from Windows owner ** Failed to build a Posix descriptor ** Failed to build permissions ** Bad descriptor, trying to display anyway ** ACL rejected, its hash is not as expected ** Could not set Windows attrib of ACL and attrib have been applied to ** There was no valid ACL for # No discretionary access control list No discretionary access control list ** Descriptor was too long (> %d) ** Descriptor for %s is not valid ** Could not change attributes of %s Security key : 0x%x out of range # Interpreted Unix owner %d, group %d, mode 0%03o Interpreted Unix owner %d, group %d, mode 0%03o ** Descriptor fails sanity check Security key : 0x%x mode %03o (already displayed) ** Could not get security data of ** There is no $SDS-%d in this volume ** Could not open $SDS-%d, size %d At offset 0x%lx got %lu bytes ** Security attribute is too long (%ld bytes) - stopping ** Entry is truncated (expected size %ld) ** General sanity check has failed ** hash 0x%08lx (computed : 0x%08lx) ** offset 0x%llx (expected : 0x%llx) ** Unordered key 0x%lx after 0x%lx Valid entry at 0x%lx for key 0x%lx ** Different hash values : $SDS-1 0x%08lx $SDS-2 0x%08lx ** Different offsets : $SDS-1 0x%llx $SDS-2 0x%llx ** Different lengths : $SDS-1 0x%lx $SDS-2 0x%lx ** Entry was not present in $SDS-1 ** Security_id 0x%x out of bounds Trying next SDS-%d block at offset 0x%lx Assuming end of $SDS, got %d bytes ** Sanity check failed - stopping there %d valid and %d deleted entries in $SDS-%d ** Extra data appended to entry (expected size %ld) # -------------------- cut here ------------------- # Please replace "user" and "group" above by the uid # and gid of the Linux owner and group of # insert the modified lines into .NTFS-3G/UserMapping, with .NTFS-3G # Insert the above lines into .NTFS-3G/UserMapping, with .NTFS-3G # being a hidden subdirectory of the root of the NTFS file system. was not created by a Windows user ** Could not find the user mapping file Retry with full path of file There were no valid user or no valid group ** Error in sample %d, perms 0%03o expected 0%03o ** Error in sample %d : mode %03o expected 0%03o Posix access rights 0%03lo expected 0%03lo default rights 0%03lo expected 0%03lo ** wrong permission settings, kind %d perm 0%03o, gotback %03o %lu ACLs built from mode, %lu ACE built, mean count %lu.%02lu ** Error : ACE count %lu instead of %lu ** Error : wrong global hash 0x%lx instead of 0x%lx %lu ACLs built from Posix ACLs, %lu ACE built, mean count %lu.%02lu Non matching got back Posix ACL ** Error ! expected ACE count %lu ** too many errors, test aborted NTFS ACL incorrect or not build ** no or wrong permission settings from PX for kind %d perm %03o ** no or wrong permission settings for kind %d perm %03o No user mapping : cannot display the Posix ACL ** Could not get the NTFS ACL, check whether file is on NTFS *** Descriptor fails sanity check Interpreted Unix mode 0%03o (owner and group are unmapped) Restore is only possible as root # # Recursive ACL collection on %s# This is only possible as root Key 0x%x : %d files, mode 0%03o ntfssecaudit 1.5.0 : NTFS security data auditing ** index size %d (instead of 48) ** index size %d (instead of 40) ** index key size %d (instead of 4) ** flags 0x%x (instead of < 4) ** key 0x%x (instead of 0x%x) ** hash 0x%x (instead of 0x%x) ** offset 0x%llx (instead of 0x%llx) ** length 0x%lx (instead of %ld) ** Entry was not present in $SDS ** There is no $SII in this volume ** Unordered hash and key 0x%x 0x%x after 0x%x 0x%x ** index size %d (instead of 56) ** index key size %d (instead of 8) ** fill3 0x%lx (instead of 0 or 0x490049) ** length %ld (instead of %ld) ** Entry was not present in $SDS nor in $SII ** There is no $SDH in this volume ** Keys not present in all files : Key 0x%x used by %d %s, not in %d keys not present in all lists All keys are present in all lists User, group or other permissions missing Interpreted input description : %s v%s (libntfs-3g) - Audit security data on a NTFS Volume. Copyright (c) 2007-2016 Jean-Pierre Andre Developers' email address: ntfs-3g-devel@lists.sf.net This program is free software, released under the GNU General Public License and you are welcome to redistribute it under certain conditions. It comes with ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be found in the file "COPYING" distributed with this program, or online at: http://www.gnu.org/copyleft/gpl.html /.NTFS-3G/UserMa ; 1 T p9 `: :4 @;H ;\ <p < P> ? A B C< J pK L O 0S S U @al b c `c4 @d d d Pe `j\ j t Px8 0} Ѐ < @p 4 0 < ` ` zR x 7& D $ 4 FJ w ?:*3$" \ t p 883 d8 8Y <9d 9 T:g ; l< A ( 4 ? BAD p ABA D ` ? BBB B(A0A8DP8A0A(B BBBH @ BDB B(A0A8T` 8F0A(B BBBE ( PG ADF B GHL ( G ADF B GHL 8 L H BEA D(F0 (L HDBI p K1 BBB B(A0A8D`hJpRhA`c 8A0A(B BBBB 8H0A(B BBBK < N BDD O ABD n NIK INI H < N BKB E(A0A8GP[ 8A0A(B BBBF L PV BGE B(A0C8F 8A0A(B BBBH L [ BBD D(F0J (G GBBJ H (H ABBK L ( \\ BBD D(F0J (G GBBJ H (H ABBK $ x \Q BAG wIB L $] BBB A(D0H (D BBBC a(D IBB H ] BEB A(D0t (D BBBD m(D IBB < ] HK T ^W PpHHF L x <^ BBB B(D0A8G 8A0A(B BBBC 0 bg AKG L AAG |AA T 8c BBB B(A0A8G L@LA 8C0A(B BBBG L T ln BBB B(A0A8G 8D0A(B BBBA L p BMB I(G0D8G 8D0A(B BBBB d t BIB E(I0K8DPW 8C0A(B BBBC 8A0A(B BBBE H \ w BBB B(D0D8Dpv 8A0A(B BBBD 0 l BKD D@ DABG ( ȂC BKJ@ ABD H FBB B(A0A8D` 8C0A(B BBBH H T 9 BBB B(A0A8D 8A0A(B BBBA P O BBB B(A0A8G L"| 8A0A(B BBBA 8 BBA A(D@? (A ABBA t 0 BKL B(K0K8Q<BNAs 8A0A(B BBBA DOPEBAI E B B D E B IKBABEBAB E B B B E B A B E B A B E B dPNIEEBAB E B A B E B B B E B A D E B A B E B Lt BABEBAB E B B B E B A B E B A B E B E tHBBBBID B B A B E B IHBGEBIDHEBEBBB E B A I E B A I E B B D E B LL | BBB B(D0A8G| 8D0A(B BBBA ̷J B| ( BDG0b ABA 0 @ BBE I0 EBBA H t BBB B(D0A8GP8 8A0A(B BBBA H 4 FIE E(D0J8Ip 8C0A(B BBBA I I a m b t e z H h r s t u v V 1 B 9 9 o @= o o o o j o @; 0 @ P ` p ! ! ! 0! @! P! `! p! ! ! ! ! ! ! ! ! " " " 0" @" P" `" p" " " " " " " " " # # # 0# @# P# `# p# # # # # # # # # $ $ $ 0$ @$ P$ `$ p$ $ $ @ M@և'#m' 500::S-1-5-21-3141592653-589793238-462843383-1000 501::S-1-5-21-3141592653-589793238-462843383-1001 502::S-1-5-21-3141592653-589793238-462843383-1002 503::S-1-5-21-3141592653-589793238-462843383-1003 516::S-1-5-21-3141592653-589793238-462843383-1016 :500:S-1-5-21-3141592653-589793238-462843383-513 :511:S-1-5-21-1607551490-981732888-1819828000-513 :516:S-1-5-21-3141592653-589793238-462843383-1012 ::S-1-5-21-3141592653-589793238-462843383-10000 /usr/lib/debug/.dwz/x86_64-linux-gnu/ntfs-3g.debug `{ 8` Y a5549cdc0da93065dda19cc02fe894159fa3f6.debug Q .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink 8 8 0 & h h $ 9 G o $ Q Y a o j j n o } B $ $ $ $ p ) ) ^ / ( ( 9 ) 9 ) 9 ) @; @+ @= @- @ 0 B 2 ! 2 G L2 4 2 /