Your team identified a rogue executable on a system. They figured out what user the executable was under and want you to check to see if the program was executed.

To do that, you can use the UserAssist keys in the registry. They keep track of programs that have been executed. The only thing is that Windows stores the UserAssist keys encoded. Can you decode them?

$\{1$NP$14$R$77-02$R$7-4$R$5$Q$-$O$744-2$RO$1$NR$5198$O$7\}\backslash$abgrcnq$.$rkr

$\{1$NP$14$R$77-02$R$7-4$R$5$Q$-$O$744-2$RO$1$NR$5198$O$7\}\backslash$Kwqjdy$\backslash$cebtenzf$\_$pna$\_$eha$\_$ohg$\_$gurl$\_$pnag$\_$uvqr.rkr

$\{1$NP$14$R$77-02$R$7-4$R$5$Q$-$O$744-2$RO$1$NR$5198$O$7\}\backslash$pzq$.$rkr