*x.dp./h0@3XX:\minintT T$X,$,(h $  )- `d `"8| %' (('T(''$h'(-x 4h%|)p ")"&` l,-h-! +`& -&(H-0P+,&P0*0$L-H( )4 #<h<p*p\*$- #Ph|& ,p, `!x$\)&t&stringsMsftmsftMicrosoftNM.ServiceDescription@nm.servicedescription@0925@ A5B52>3> <>=8B>@0NETMON.DisplayNamenetmon.displaynameSERVICE_KERNEL_DRIVER0 service_kernel_driver 0x00000001SERVICE_FILE_SYSTEM_DRIVER service_file_system_driver4 0x00000002SERVICE_ADAPTER@ service_adapter0x00000004SERVICE_RECOGNIZER_DRIVER service_recognizer_driver*0x00000008SERVICE_WIN32_OWN_PROCESS0 service_win32_own_process 0x00000010SERVICE_WIN32_SHARE_PROCESS service_win32_share_process0x00000020SERVICE_INTERACTIVE_PROCESSP service_interactive_process+0x00000100SERVICE_INTERACTIVE_SHARE_PROCESS service_interactive_share_process0x00000120SERVICE_BOOT_START service_boot_start0x00000000SERVICE_SYSTEM_STARTservice_system_startSERVICE_AUTO_STARTdservice_auto_startSERVICE_DEMAND_STARTservice_demand_startt 0x00000003SERVICE_DISABLED8service_disabledSERVICE_ERROR_IGNOREservice_error_ignoreSERVICE_ERROR_NORMALservice_error_normalSERVICE_ERROR_SEVEREHservice_error_severeSERVICE_ERROR_CRITICALservice_error_criticalREG_MULTI_SZreg_multi_sz0x10000REG_EXPAND_SZdreg_expand_sz 0x20000REG_DWORDreg_dword0x10001versionsignature$Windows NT$&ClassHclassNetTransClassGUIDclassguid{4d36e975-e325-11ce-bfc1-08002be10318}providerLayoutFilelayoutfilelayout.infDriverVerpdriverver07/01/20015.1.2535.0manufacturer(microsoft4@0925@ A5B52>3> <>=8B>@0NETMON.PrimaryInstallMS_NetMonHnetmon.primaryinstallCharacteristicscharacteristics0x0AddRegaddregRegistry.NETMON.PrimaryInstallDelRegdelregRegistry.NETMON.DelNMPerf<registry.netmon.primaryinstallHKRNdiHelpText@netcfgx.dll,-50020ServiceNMNdi\InterfacesUpperRangenoupperLowerRangendis5,ndiswanbh,ndisatm,ndis1394CoServicesHKLMSOFTWARE\Classes\CLSID\{D413C502-3FAA-11D0-B254-444553540000}NPPAgentAppID{D413C502-3FAA-11D0-B254-444553540000}SOFTWARE\Classes\CLSID\{D413C502-3FAA-11D0-B254-444553540000}\LocalServer32X:\minint\system32\NPP\NPPAgent.exeThreadingModelApartmentSOFTWARE\Classes\AppID\{D413C502-3FAA-11D0-B254-444553540000}SOFTWARE\Classes\CLSID\{944AD531-B09D-11CE-B59C-00AA006CB37D}REG_SZPSFactoryBufferSOFTWARE\Classes\CLSID\{944AD531-B09D-11CE-B59C-00AA006CB37D}\InProcServer32X:\minint\system32\PsNPPAgn.dllBoth$HKCRInterface\{944AD531-B09D-11CE-B59C-00AA006CB37D}IRemoteStatsInterface\{944AD531-B09D-11CE-B59C-00AA006CB37D}\ProxyStubClsid32`{944AD531-B09D-11CE-B59C-00AA006CB37D}Interface\{944AD531-B09D-11CE-B59C-00AA006CB37D}\NumMethods16Interface\{944AD532-B09D-11CE-B59C-00AA006CB37D}IRemoteFinderInterface\{944AD532-B09D-11CE-B59C-00AA006CB37D}\ProxyStubClsid32Interface\{944AD532-B09D-11CE-B59C-00AA006CB37D}\NumMethods4Interface\{8947C648-3833-11D1-8682-00C04FBFE171}IRemoteCallBackInterface\{8947C648-3833-11D1-8682-00C04FBFE171}\ProxyStubClsid32Interface\{8947C648-3833-11D1-8682-00C04FBFE171}\NumMethodsInterface\{394540A0-6FCF-11D0-ACE0-0000F80114D3}IRemoteDelaydCInterface\{394540A0-6FCF-11D0-ACE0-0000F80114D3}\ProxyStubClsid32Interface\{394540A0-6FCF-11D0-ACE0-0000F80114D3}\NumMethodsInterface\{E99A04AB-AB95-11D0-BE96-00A0C94989DE}IRemoteESPInterface\{E99A04AB-AB95-11D0-BE96-00A0C94989DE}\ProxyStubClsid32Interface\{E99A04AB-AB95-11D0-BE96-00A0C94989DE}\NumMethods13SYSTEM\CurrentControlSet\Services\nm\ParametersSYSTEM\CurrentControlSet\Control\Safeboot\Network\nmSYSTEM\CurrentControlSet\Control\Safeboot\Network\nm.sysDriverregistry.netmon.delnmperfSYSTEM\CurrentControlSet\Services\nm\Performance*CloseNmClosePerformanceDataCollectNmCollectPerformanceDataLibrarynmperf.dllOpenNmOpenPerformanceDatadestinationdirsNETMON.Files.sys@'netmon.files.sys11NETMON.Files.drv'netmon.files.drv12NETMON.Files.NPP'netmon.files.nppNPPnetmon.primaryinstall.servicesAddService(addservice0x10 PrimaryInstall.AddService.NM(primaryinstall.addservice.nmDisplayName`)displaynameServiceType)servicetype1$StartType)starttype3ErrorControl*errorcontrolServiceBinaryP*servicebinaryX:\minint\system32\DRIVERS\NMnt.sysnetmon.primaryinstall.removeRegistry.NETMON.Deletenetmon.primaryinstall.remove.services,DelService+delservice+registry.netmon.deleteAppID\{D413C502-3FAA-11D0-B254-444553540000}LaunchPermissionRunAsSOFTWARE\Classes\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}InProcServer32LocalServer32PsNPPAgn.dll|%2NPPTools.dllnmnt.sysndisnpp.dllNPPAgent.exesignature$Windows NT$ClassNetTransClassGUID{4d36e975-e325-11ce-bfc1-08002be10318}providerMicrosoftLayoutFilelayout.infDriverVer07/01/2001"|%A'FT(I )J*OP+P+Qh'c'e (f  !$'*-0369<?BEHKNQTX[_behmrw| "%(+.147:=@CFILORUX\`dhjlnrvz~(p@ ` 0 $ d @  h 0 4 P , t 4 d$ `8   xH$ 0Pd(XHh(8Tp(Hx(<$0<T\$0T$T$T$0`P|T |$4|T$|p||,T|T|pTPpTLTT<\TT`hTT| T` T`!!T "T"T" #T#T$|$|$T|$Th%|%&T,&|%`&Tt&|%&T&|%&T&|%h'@''''' (''H(((((|)`))))))*0**)p*P**+++ ,l, ,,|,$-|,T|$|H-|p|T|,$-|,p|,T|%&,&|%`&t&|%&&|%&&|%|$|,h-TT--TT--TT--TT--TT-