403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Program Files/Windows Defender/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/Program Files/Windows Defender/MpEvMsg.dll
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$�<ߵ�R���R���R�Ы����R�ЫP���R�Rich��R�PEd��:���" 
��


��Z` (��8!8.rdata�@@.rsrc(� �@@�:��
T88�:��$��8.rdata8x.rdata$zzzdbg .rsrc$01!�.rsrc$02 :9M;ښaO9E�,bތ2G�\1�k�C��:���(���@�X�p�����	�	�	�@���$��!�
WEVT_TEMPLATEMUI�4VS_VERSION_INFO��@@?�StringFileInfo�040904B0LCompanyNameMicrosoft CorporationTFileDescriptionEvent Resource Modulen'FileVersion4.18.1807.16384 (WinBuild.160101.0800)8InternalNameMpEvMsg.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.@OriginalFilenameMpEvMsg.dllj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion4.18.1807.16384DVarFileInfo$Translation	�CRIM�������N��_�߽,x$WEVTl��tX
�<�H�Ի��CHAN����������dMicrosoft-Windows-Windows Defender/OperationalTMicrosoft-Windows-Windows Defender/WHCTTBL��>TEMP��3�;���U!2t�a�i����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��]�oDataEK�NameCurrent Signature Version
A��_�oDataGK�NamePrevious Signature Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��S�oData;K�NameSignature Type Index
A��G�oData/K�NameSignature Type
A��M�oData5K�NameUpdate Type Index
A��A�oData)K�NameUpdate Type

A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
��D�������	@	h	�	�	 Product Name$Product Version8Current Signature Version<Previous Signature VersionUnusedUnused2Unused3DomainUserSID0Signature Type Index$Signature Type(Update Type IndexUpdate Type4Current Engine Version4Previous Engine VersionTEMP`�������U���gK�q���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��]�oDataEK�NameCurrent Signature Version
A��_�oDataGK�NamePrevious Signature Version
A��Q�oData9K�NameUpdate Source Index
A��E�oData-K�Name
Update Source
A��7�oDataK�NameUnused
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��S�oData;K�NameSignature Type Index
A��G�oData/K�NameSignature Type
A��M�oData5K�NameUpdate Type Index
A��A�oData)K�NameUpdate Type

A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��O�oData7K�NameUpdate State Index
A��C�oData+K�NameUpdate State
A��A�oData)K�NameSource Path
Xx��<\p�����8l���0 Product Name$Product Version8Current Signature Version<Previous Signature Version,Update Source Index Update SourceUnusedDomainUserSID0Signature Type Index$Signature Type(Update Type IndexUpdate Type4Current Engine Version4Previous Engine VersionError Code(Error Description,Update State Index Update StateSource PathTEMP�x��]J^e�Vł?y�4�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��E�oData-K�Name
Feature Index
A��C�oData+K�NameFeature Name

���<Pdx������ Product Name$Product Version4Current Engine Version4Previous Engine VersionUnusedUnused2Unused3DomainUserSIDUnused4Unused5 Feature Index Feature NameTEMP` �!�76�W	ı#.�Y���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��O�oData7K�NameUpdate State Index
A��C�oData+K�NameUpdate State

x!�!�!�!$"8"L"`"t"�"�"�"�"# Product Name$Product Version4Current Engine Version4Previous Engine VersionUnusedUnused2Unused3DomainUserSIDError Code(Error Description,Update State Index Update StateTEMP�

�&��R��^�~�?�����ND�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��_�oDataGK�NameSignatures Attempted Index
A��S�oData;K�NameSignatures Attempted
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��]�oDataEK�NameLoading signature version
A��W�oData?K�NameLoading engine version
	l'�'�'�'(8(`(t(�(�( Product Name$Product Version<Signatures Attempted Index0Signatures AttemptedError Code(Error DescriptionUnusedUnused28Loading signature version4Loading engine versionTEMPp 2K�Օ�&T��M��k�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��]�oDataEK�NameCurrent Signature Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��S�oData;K�NameSignature Type Index
A��G�oData/K�NameSignature Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��c�oDataKK�NameDynamic Signature Type Index
A��W�oData?K�NameDynamic Signature Type
A��K�oData3K�NamePersistence Path
A��]�oDataEK�NameDynamic Signature Version
A��y�oDataaK�Name'Dynamic Signature Compilation Timestamp
A��c�oDataKK�NamePersistence Limit Type Index
A��W�oData?K�NamePersistence Limit Type
A��Y�oDataAK�NamePersistence Limit Value
d4�4�4�4�45505D5T5`5�5�5�5�56$686L6d6|6�6�6707h7�7�708 Product Name$Product Version8Current Signature VersionUnusedUnused2Unused3Unused4DomainUserSID0Signature Type Index$Signature TypeUnused5Unused64Current Engine VersionUnused7Unused8Unused9Unused10Unused11Unused12@Dynamic Signature Type Index4Dynamic Signature Type(Persistence Path8Dynamic Signature VersionTDynamic Signature Compilation Timestamp@Persistence Limit Type Index4Persistence Limit Type4Persistence Limit ValueTEMP�DB\'I�$OX]���x�D���	D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��]�oDataEK�NameCurrent Signature Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��S�oData;K�NameSignature Type Index
A��G�oData/K�NameSignature Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��c�oDataKK�NameDynamic Signature Type Index
A��W�oData?K�NameDynamic Signature Type
A��K�oData3K�NamePersistence Path
A��]�oDataEK�NameDynamic Signature Version
A��y�oDataaK�Name'Dynamic Signature Compilation Timestamp
A��c�oDataKK�NamePersistence Limit Type Index
A��W�oData?K�NamePersistence Limit Type
A��Y�oDataAK�NamePersistence Limit Value
A��S�oData;K�NameRemoval Reason Index
A��S�oData;K�NameRemoval Reason Value
�D�D�D,E@ETEhE|E�E�E�E�EFF(F\FpF�F�F�F�F�F GTG|G�GHHH|H�H�H Product Name$Product Version8Current Signature VersionUnusedUnused2Unused3Unused4DomainUserSID0Signature Type Index$Signature TypeUnused5Unused64Current Engine VersionUnused7Unused8Unused9Unused10Unused11Unused12@Dynamic Signature Type Index4Dynamic Signature Type(Persistence Path8Dynamic Signature VersionTDynamic Signature Compilation Timestamp@Persistence Limit Type Index4Persistence Limit Type4Persistence Limit Value0Removal Reason Index0Removal Reason ValueTEMP�TR�ʡ9��7_��$�S�9��	D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��]�oDataEK�NameCurrent Signature Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��S�oData;K�NameSignature Type Index
A��G�oData/K�NameSignature Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
A��9�oData!K�NameUnused7
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��c�oDataKK�NameDynamic Signature Type Index
A��W�oData?K�NameDynamic Signature Type
A��K�oData3K�NamePersistence Path
A��]�oDataEK�NameDynamic Signature Version
A��y�oDataaK�Name'Dynamic Signature Compilation Timestamp
A��c�oDataKK�NamePersistence Limit Type Index
A��W�oData?K�NamePersistence Limit Type
A��Y�oDataAK�NamePersistence Limit Value
�T�T�TU(U<UPUdUxU�U�U�U�U�UVDVXVtV�V�V�V�VWPWxW�WXDXxX Product Name$Product Version8Current Signature VersionUnusedUnused2Unused3Unused4DomainUserSID0Signature Type Index$Signature TypeUnused5Unused64Current Engine VersionUnused7Error Code(Error DescriptionUnused8Unused9Unused10@Dynamic Signature Type Index4Dynamic Signature Type(Persistence Path8Dynamic Signature VersionTDynamic Signature Compilation Timestamp@Persistence Limit Type Index4Persistence Limit Type4Persistence Limit ValueTEMPX,]���DһU�l���4�:��LD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��]�oDataEK�NameCurrent Signature Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��S�oData;K�NameSignature Type Index
A��G�oData/K�NameSignature Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
X^x^�^�^�^�^_$_8_H_T_�_�_�_�_ Product Name$Product Version8Current Signature VersionUnusedUnused2Unused3Unused4DomainUserSID0Signature Type Index$Signature TypeUnused5Unused64Current Engine VersionTEMPT�`<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
a4a Product Name$Product VersionTEMP�cO�U��W�'���������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
|c�c�c�c�c Product Name$Product VersionUnusedError Code(Error DescriptionTEMPTe<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
(eHe Product Name$Product VersionTEMPTTf<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
|f�f Product Name$Product VersionTEMP��hO�U��W�'���������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
�hi(i<iXi Product Name$Product VersionUnusedError Code(Error DescriptionTEMP��jj\c��Y{�t��&&Z���D�	EventDataA��C�oData+K�NameProduct Name
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
�j�jk Product NameUnusedUnused2TEMP�4lj\c��Y{�t��&&Z���D�	EventDataA��C�oData+K�NameProduct Name
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
pl�l�l Product NameUnusedUnused2TEMP��mj\c��Y{�t��&&Z���D�	EventDataA��C�oData+K�NameProduct Name
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
n,n@n Product NameUnusedUnused2TEMP(�o�nT:rP[�/�������4D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��;�oData#K�NameFilename
A��7�oDataK�NameSha256
p,pPphp Product Name$Product VersionFilenameSha256TEMP��r�K�i�._�B2s��Ǻ��<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��;�oData#K�NameFilename
A��7�oDataK�NameSha256
A��]�oDataEK�NameCurrent Signature Version
A��W�oData?K�NameCurrent Engine Version
A��?�oData'K�Name
Error Code
xs�s�s�s�s tTt Product Name$Product VersionFilenameSha2568Current Signature Version4Current Engine VersionError CodeTEMPTXu<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
�u�u Product Name$Product VersionTEMPD<wo��!�C�]�	���k��BD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��?�oData'K�Name
Error Code
A��A�oData)K�NameHttp Status
�w�w�w�w Product Name$Product VersionError CodeHttp StatusTEMP�p{Ի��\�~,9����2D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��G�oData/K�NameScan Resources
L|l|�|�|�|�|}4}H}X}d} Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSID$Scan ResourcesTEMP�

����?�#��S�a�}.1:���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��I�oData1K�NameScan Time Hours
A��M�oData5K�NameScan Time Minutes
A��M�oData5K�NameScan Time Seconds
�������0�`���������؃� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSID$Scan Time Hours(Scan Time Minutes(Scan Time SecondsTEMP�

@���VY�Z{�	R�ϸ���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	�(�L�`�����̈��� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDTEMP�

8���VY�Z{�	R�ϸ���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	� �D�X�|������ Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDTEMP�

0���VY�Z{�	R�ϸ���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	���<�P�t�������� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDTEMPĖ�@�q���U��#mߖ$��~D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
��ԗ���0�H�x�������̘� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDError Code(Error DescriptionTEMP,���㠅>��W�kf`�O��HD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��W�oData?K�NameDetection Source Index
A��K�oData3K�NameDetection Source
A��7�oDataK�NameUnused
A��C�oData+K�NameProcess Name
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��?�oData'K�Name
Path Found
A��W�oData?K�NameDetection Origin Index
A��K�oData3K�NameDetection Origin
A��W�oData?K�NameExecution Status Index
A��K�oData3K�NameExecution Status
A��S�oData;K�NameDetection Type Index
A��G�oData/K�NameDetection Type
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
��ܣ� �T�|�����ĤԤ����0�L�`�|���إ�4�d�������Ц�� Product Name$Product Version Detection ID4Detection Source Index(Detection SourceUnused Process NameDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPath Found4Detection Origin Index(Detection Origin4Execution Status Index(Execution Status0Detection Type Index$Detection TypeUnused2Unused3 Severity Name Category Name(Signature Version$Engine VersionTEMP
4�H�p�
�Z���e����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��A�oData)K�NameStatus Code
A��O�oData7K�NameStatus Description
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��U�oData=K�NameCleaning Action Index
A��I�oData1K�NameCleaning Action
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
d�����ȱܱ��8�L�\�h�������Բ���� �P�t�������ij��,� Product Name$Product Version Detection IDUnusedUnused2Status Code,Status DescriptionDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused3Unused40Cleaning Action Index$Cleaning ActionUnused5Unused6Unused7Unused8 Severity Name Category Name(Signature Version$Engine VersionTEMPL
d�`ϭ ^cǁ���Q���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��A�oData)K�NameStatus Code
A��O�oData7K�NameStatus Description
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��U�oData=K�NameCleaning Action Index
A��I�oData1K�NameCleaning Action
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
����ؾ��� �<�h�|�������̿���(�<�P�����������0�P�x� Product Name$Product Version Detection IDUnusedUnused2Status Code,Status DescriptionDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused3Unused40Cleaning Action Index$Cleaning ActionError Code(Error DescriptionUnused5Unused6 Severity Name Category Name(Signature Version$Engine VersionTEMP�H�m���kU��E.n���xD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��;�oData#K�NameUnused13
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
x������������ �4�D�P�l���������������0�H�`�x��������� Product Name$Product VersionUnusedUnused2Unused3Unused4Unused5DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused6Unused7Unused8Unused9Unused10Unused11Unused12Unused13 Severity Name Category Name(Signature Version$Engine VersionTEMP���c�'N��U6`rhf>����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
�0�T�p�������������� �8�T�p����������������$�<�\�|��� Product Name$Product VersionError Code(Error DescriptionUnusedUnused2Unused3DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused4Unused5Unused6Unused7Unused8Unused9Unused10Unused11 Severity Name Category Name(Signature Version$Engine VersionTEMP�t�m���kU��E.n���xD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��;�oData#K�NameUnused13
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
���������$�8�L�`�p�|������������ �4�H�\�t�����������$� Product Name$Product VersionUnusedUnused2Unused3Unused4Unused5DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused6Unused7Unused8Unused9Unused10Unused11Unused12Unused13 Severity Name Category Name(Signature Version$Engine VersionTEMP��c�'N��U6`rhf>����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
<�\�������������$�0�L�d����������������$�8�P�h������� Product Name$Product VersionError Code(Error DescriptionUnusedUnused2Unused3DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused4Unused5Unused6Unused7Unused8Unused9Unused10Unused11 Severity Name Category Name(Signature Version$Engine VersionTEMP�

�K�4?y{�X�0���G3���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��=�oData%K�Name	Timestamp
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	��������0�D�X�h� Product Name$Product VersionTimestampUnusedUnused2Unused3Unused4DomainUserSIDTEMP�

h���1��Z+������6���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��=�oData%K�Name	Timestamp
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	0�P�t����������� Product Name$Product VersionTimestampError Code(Error DescriptionUnusedUnused2DomainUserSIDTEMP�%%8���K^nS��,c����
D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��W�oData?K�NameDetection Source Index
A��K�oData3K�NameDetection Source
A��7�oDataK�NameUnused
A��C�oData+K�NameProcess Name
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��?�oData'K�Name
Path Found
A��W�oData?K�NameDetection Origin Index
A��K�oData3K�NameDetection Origin
A��W�oData?K�NameExecution Status Index
A��K�oData3K�NameExecution Status
A��S�oData;K�NameDetection Type Index
A��G�oData/K�NameDetection Type
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
A��?�oData'K�Name
Process ID
A��C�oData+K�NameSignature ID
A��E�oData-K�Name
FidelityValue
A��E�oData-K�Name
FidelityLabel
A��I�oData1K�NameImage File Hash
 A��9�oData!K�NameUnused4
!A��9�oData!K�NameUnused5
"A��G�oData/K�NameTargetFileName
#A��G�oData/K�NameTargetFileHash
$<`����$4@\t����
8
l
�
�
�
�
0Px����<Pd� Product Name$Product Version Detection ID4Detection Source Index(Detection SourceUnused Process NameDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPath Found4Detection Origin Index(Detection Origin4Execution Status Index(Execution Status0Detection Type Index$Detection TypeUnused2Unused3 Severity Name Category Name(Signature Version$Engine VersionProcess ID Signature ID FidelityValue FidelityLabel$Image File HashUnused4Unused5$TargetFileName$TargetFileHashTEMP�**�$���^�5���*��$D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��M�oData5K�NameSignature Version
(A��G�oData/K�NameEngine Version
)Ll����� 0 L l � � � � !!,!H!h!�!�!�!�!�!"("<"T"�"�"�"�"�"#$#L#|#�#�#�#$ Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6(Signature Version$Engine VersionTEMP�**�0�$���^�5���*��$D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��M�oData5K�NameSignature Version
(A��G�oData/K�NameEngine Version
)�3�3 4@4d4x4�4�4�4�4�4585L5h5�5�5�5�5�5606@6X6t6�6�6�6�67,7H7\7x7�7�7�78D8l8�8�8 Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6(Signature Version$Engine VersionTEMP�**$E�$���^�5���*��$D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��M�oData5K�NameSignature Version
(A��G�oData/K�NameEngine Version
)lH�H�H�H�HII4IPIlI�I�I�I�I�I$J4JLJhJ�J�J�J�J�JK$KHK\KtK�K�K�K�KL0LDLlL�L�L�LM8M Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6(Signature Version$Engine VersionTEMP�**�Y�$���^�5���*��$D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��M�oData5K�NameSignature Version
(A��G�oData/K�NameEngine Version
)�\]@]`]�]�]�]�]�]�]^8^X^l^�^�^�^�^�^_<_P_`_x_�_�_�_�_`4`L`h`|`�`�`�`�`,ada�a�a�a Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6(Signature Version$Engine VersionTEMP��c_w�mHZV� ����1���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��S�oData;K�NameThreat resource path
A��7�oDataK�NameHashes
d0dTdhd�d Product Name$Product VersionUnused0Threat resource pathHashesTEMP�

�g�{�A��yUt'4z�_���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��/�oDataK�NameID
A��G�oData/K�NameDetection Time
A��3�oDataK�NameUser
A��3�oDataK�NamePath
A��C�oData+K�NameProcess Name
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
	�h�h�h�h�hii(iHipi Product Name$Product VersionUnusedID$Detection TimeUserPath Process Name(Signature Version$Engine VersionTEMP��k��WW��^V�M�k��D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��/�oDataK�NameID
A��G�oData/K�NameDetection Time
A��3�oDataK�NameUser
A��A�oData)K�NameDestination
A��C�oData+K�NameProcess Name
Xlxl�l�l�l�l�l Product Name$Product VersionID$Detection TimeUserDestination Process NameTEMP��n\&�r�a�[�v�o�=g���D�	EventDataA��C�oData+K�NameProduct Name
A��K�oData3K�NamePlatform version
A��7�oDataK�NameUnused
A��G�oData/K�NameEngine version
A��M�oData5K�NameSignature version
Hoho�o�o�o Product Name(Platform versionUnused$Engine version(Signature versionTEMP��x,�+P��R�f@��W���xD�	EventDataA��C�oData+K�NameProduct Name
A��K�oData3K�NamePlatform version
A��7�oDataK�NameUnused
A��G�oData/K�NameEngine version
A��O�oData7K�NameNRI engine version
A��Q�oData9K�NameAVSignature version
A��Q�oData9K�NameASSignature version
A��U�oData=K�NameNRI Signature version
A��=�oData%K�Name	RTP state
A��;�oData#K�NameOA state
	A��?�oData'K�Name
IOAV state
A��;�oData#K�NameBM state
A��U�oData=K�NameLast AV signature age
A��U�oData=K�NameLast AS signature age

A��Q�oData9K�NameLast quick scan age
A��O�oData7K�NameLast full scan age
A��_�oDataGK�NameAV signature creation time
A��_�oDataGK�NameAS signature creation time
A��_�oDataGK�NameLast quick scan start time
A��[�oDataCK�NameLast quick scan end time
A��W�oData?K�NameLast quick scan source
A��]�oDataEK�NameLast full scan start time
A��Y�oDataAK�NameLast full scan end time
A��U�oData=K�NameLast full scan source
A��G�oData/K�NameProduct status
�z�z�z�z{<{h{�{�{�{�{|(|X|�|�|�|}X}�}�}~8~l~�~ Product Name(Platform versionUnused$Engine version,NRI engine version,AVSignature version,ASSignature version0NRI Signature versionRTP stateOA stateIOAV stateBM state0Last AV signature age0Last AS signature age,Last quick scan age,Last full scan age<AV signature creation time<AS signature creation time<Last quick scan start time8Last quick scan end time4Last quick scan source8Last full scan start time4Last full scan end time0Last full scan source$Product statusTEMP�**��$���^�5���*��$D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��M�oData5K�NameSignature Version
(A��G�oData/K�NameEngine Version
)`�����Ď����(�D�`�������Џ��(�@�\�|�����Đܐ���<�P�h�����̑���$�8�`���Ȓ��,� Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6(Signature Version$Engine VersionTEMP���U�J!��WU���:Z�K��D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameFeature Name
A��7�oDataK�NameReason
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��?�oData'K�Name
Feature ID
,�L�p�������� Product Name$Product Version Feature NameReasonError Code(Error DescriptionFeature IDTEMP|8�U�.WFi�].3<<_�]��D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameFeature Name
A��7�oDataK�NameReason
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��?�oData'K�Name
Feature ID
�(�<�P�d� Product Name$Product Version Feature NameReasonUnusedUnused2Feature IDTEMPTh�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
���� Product Name$Product VersionTEMPT��<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
�� Product Name$Product VersionTEMP0,��W�(.�T��;������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameFeature Name
A��E�oData-K�Name
Configuration
A��7�oDataK�NameUnused
A��?�oData'K�Name
Feature ID
��ğ��(�<� Product Name$Product Version Feature Name ConfigurationUnusedFeature IDTEMP4ȡ�D��Yd�_�jrl���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��=�oData%K�Name	Old Value
A��=�oData%K�Name	New Value
�8�\�t� Product Name$Product VersionOld ValueNew ValueTEMP\��:m; ���VJ�@�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��;�oData#K�NameResource
A��O�oData7K�NameFailure Type Index
A��C�oData+K�NameFailure Type
A��G�oData/K�NameException Code
�<�`�x���ĥ Product Name$Product VersionResource,Failure Type Index Failure Type$Exception CodeTEMPTЦ<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
��� Product Name$Product VersionTEMPT$�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
L�l� Product Name$Product VersionTEMPTx�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
���� Product Name$Product VersionTEMPT̪<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
�� Product Name$Product VersionTEMP���4��x�^Q^``�}$J���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameUnused3
A��M�oData5K�NameExpiration Reason
A��U�oData=K�NameExpiration Date (UTC)
t�����̭� Product Name$Product VersionUnused3(Expiration Reason0Expiration Date (UTC)TEMP���}%2��2U�k?ΫS��>D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameUnused3
A��M�oData5K�NameExpiration Reason
A��U�oData=K�NameExpiration Date (UTC)
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
$�D�h�|���Ա� Product Name$Product VersionUnused3(Expiration Reason0Expiration Date (UTC)Error Code(Error DescriptionTEMP�����h�@hV]��*@%�C��`D�	EventDataA��?�oData'K�Name
hc_stateid
��hc_stateidTEMP��FpSiC�V#v/M�o�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��G�oData/K�NamePolicy Version
A��G�oData/K�NamePolicy Rule Id
A��M�oData5K�NameEnforcement Level
A��C�oData+K�NameAudit Reason
A��I�oData1K�NameEvent Timestamp
A��A�oData)K�NameAction Type
A��9�oData!K�NameProcess
	A��7�oDataK�NameSource
A��7�oDataK�NameTarget
A��?�oData'K�Name
Session Id
A��;�oData#K�NameUser Sid

A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
���@�T�x���Ĺ��$�8�L�`�|����� Product Name$Product VersionUnused$Policy Version$Policy Rule Id(Enforcement Level Audit Reason$Event TimestampAction TypeProcessSourceTargetSession IdUser Sid(Signature Version$Engine VersionPRVA\�Microsoft-Windows-Windows DefenderOPCOLEVL�Px�P��P��win:Errorwin:Warning(win:InformationalTASKKEYWEVNT�Ce@e�������xl�������}l������(�`������ �l�������l�������T�������`������<�l������P�T��������l�������T��������l������H�T��������l������t�T������(�`��\�\��`��]�]�<$l��^�^��8l��_�_�\MT��`�`��al��a�a��d`��b�b��dl��c�c��d`��d�d��dl��e�e��il��f�f��i`��g�g��d`��h�h��dl��m�m�ܲl��n�n�ܲl��~�~�ml�����ol�������~`������dl�������	T������Ll������T������ #T������``������XaT������d`�������(l������d8l������IT�������Xl������lel�������fT�������i`������kT�������lT����Tnl����|pT������P�T�������l��������l������ԛl������(�l������X�l��������T�������l������<�l��������l�������l������8�`������$�T�����������s|���b�JK��W�1\�|n�6�*����WEVT_TEMPLATEMUIMUIen-US8!0�!(	*�H��
��!0�!10
	`�He0\
+�7�N0L0
+�70	���010
	`�He �Fg�os����D��n���o���D�U�r#�
�0�0��32A�Y�m�M�20
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
190502212436Z
200502212436Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
��c[v��P( �\��
f�A��u?�`��S9�dɞ�)�K�G���ʢ���I;��W���]~e����.�}bgk#!F���-��I��O��|u� nR�a�j���7�G7t�ƾ׃�$�\��;���.��y��v�d�\CHx�NMD6���[���>l��ʴ�A,T�4ų���ФT`7;��[�E������X�p)�T�ľ4�0P��:Iǵzr �j��֓�HA1o7w�k�����0�~0U%0
+�7
+0U���M���3��ھ���ŻZ0TUM0K�I0G1-0+U$Microsoft Ireland Operations Limited10U
229879+4541120U#0��)9�ėx͐��O��|U�S0TUM0K0I�G�E�Chttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
�����&�*0i�:X|�
�p���TroW�y�@c�}�
(�{4�7 �1]֐�R��	޿�I�V��@r�k8�9�^�z'�>��,�����н�/¡��ɉ��h�0ӮE,[�����^xLD���E�6������F�$GVޏ�޾?=�^,?2+�!�R�#��L+x`r�9Lԭ����]���w�f�	�R�+�b��fD��h���0'����fF+;�"F	�WqЗZe�D�n!w�0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1��0��0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 201132A�Y�m�M�20
	`�He��0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" �T�s�c��N��0�@���){��>�0<
+�7
1.,60UsvxkDKMJ0TZ83vZPSZleqBhY3/D+LlcqzogryHDY=0Z
+�71L0J�$�"Microsoft Windows�"� http://www.microsoft.com/windows0
	*�H��
�}��m��f@�e�(C�
�R85Iz�B��y��g��6
o��յ@^f�5�7��;�<�(�$f=�Rt�!�20�9����u{��->k�(�a��N��	�-%���uD*�݄K�z�^��iV��a���(D�t�x�C��L����/�����!�*�-�t��E}ɐ��0i(�~0�a�0$R�b�����lld(�9�^*����I��$+�(��1.M9���c�,�s9�|9c��ɒ
_p���0��
+�71��0��	*�H��
���0��10
	`�He0�Q*�H��
	��@�<0�8
+�Y
010
	`�He ���" ���^T�Z���ide�����Fz�^L{R3�20200221054337.563Z0����0��10	UUS10	UWA10URedmond10U
Microsoft Corporation1-0+U$Microsoft Ireland Operations Limited1&0$UThales TSS ESN:86DF-4BBC-93351%0#UMicrosoft Time-Stamp Service��90��0�٠3�r�:���0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
191023231918Z
210121231918Z0��10	UUS10	UWA10URedmond10U
Microsoft Corporation1-0+U$Microsoft Ireland Operations Limited1&0$UThales TSS ESN:86DF-4BBC-93351%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
��M9@����b�5�Af����P�@��Τ���lw��L崆��.�</<J
��̘�Eîrt�H
���D�$��8Z��Oú &n~Lj��Iڠ8�%�\��Cи�M�_`����`d�;)W��+�4���@���n�AYX�ن�LT�W�r�d���g�$��I�_��<�D[��bjX�g�ܷ����?��Z�'�b���7y��{gU��B�ů�0�DU�YX�Խt~��=?�UT��3��0�0U�!�mRƠ��v�ʖ��{0U#0��c:\�1��C{|F�3hZ�mU0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0U�00U%0
+0
	*�H��
�P��6wZi���(V��y}�������x�w|�n�,�_���ȁ��)����βe�����#��a���bD,���E��[����9�`FRڍ΃awDƵD��G��H#b��e�{ϋ�Z%C�^��
M��)m��>M��:�hǯq#Z���;h{�h �KC�l�|�F������49;�?�*K&�8̦6��	�����^T�PJ��F�t����S�n.f�nj��ո(�}�+36M�~0�q0�Y�
a	�*0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
��
�w�: ����i�ktTե
����|hK,_���a�v�>f+[�S'1A��	�|a0Y�0D�`��TC�M�8�Bݓ��s0W&��E
��G�Ϳ$`2X`F�XG�2�tag�_�T�ϓL��Ħ]�an(������a�F�'$gr!��Kd�Pb�]�w=�Wu���BM@Q��>g�f��D~��K�n�ʱ��z*
1��N���5�x���<�/D����d��� 	�x����D]^�O"M���0��0	+�70U�c:\�1��C{|F�3hZ�mU0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��U ���0��0��	+�7.0��0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0
	*�H��
��Q
���?�q=���!o���1����Wm0���f�j���x�Ǩ�%��kTW+Q�D��S���`�v�@@A��\�\�^5�$VKt�Bȯ���7}Z?�yJ�R�8�/y�e٩�k����zoK0D$"<�����Y)����p�2J'�U�/���3�b_��W@��Ιf���jb��J�&�9�Jqc�{!mÜ��<�}�j�x�m���8ؔ�ƥ
������B�����"8 �%�d��~cY%z.9Wv�q����a�˚�G����ͧ��}���;q	�]t�"aڰPo�����1��:�eGx�H���r~akow��˧	�9����؂�r�����*T9�[��
U�z�s;�-��3.)��/T'!�ȬN�(���ۖ��B���AM�*��f0ӻt2K�c{���/�!�Y���D<�Pqס��U�i�W���0����M�
�]O�8/��X.�
�P5��	'ճ~5��6��_��t�I���0�40����Ф��0��10	UUS10	UWA10URedmond10U
Microsoft Corporation1-0+U$Microsoft Ireland Operations Limited1&0$UThales TSS ESN:86DF-4BBC-93351%0#UMicrosoft Time-Stamp Service�#
0+$A�B�S�y۴��Az�d�i���0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
��0"20200221080310Z20200222080310Z0t0:
+�Y
1,0*0
��0�0�0
��>06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
��
q�=���剢��F��ڶ&9k9N�oƜ��,{�l�ik&�R
�B��-�Ŏr��G%�s�����%0�<��.g����͕ə�d���_�5z�Ҕ��KR5�X����0�t��>(
`1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103�r�:���0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" ��y'I�B��ba��GK�ul�D��l@NE��0��*�H��
	/1��0��0��0�� ?��yh-l�A[�kD�K��޳��tt>�0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103�r�:���0" u�C>�s��"�vVаy԰��)��^ޜ��b0
	*�H��
�5�*VK �7���Yi���!����X:�0��k ������]�U��[}�s)}D�h0���8�&��H���v�7�Ԍ��)AD�� m��ՃȦ��c2����2��^���۠E
�E҅M�Y�u�Mx��-`��z�w�M�΂;M8m��+]�*8�n��a���|�/)zf�]q�hx�(��?����F4i;�K
~��Q0*O���[ޔP���3֢�RN�9�1���,�o�H��m

Youez - 2016 - github.com/yon3zu
LinuXploit