403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.26060.3008-0/ru-RU/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.26060.3008-0/ru-RU/DefenderDiag.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$�;=߉ZS��ZS��ZS�Ӭ��ZS��Q��ZS�Rich�ZS�PEd�.��}�" ,$�P��` |!&�%8.rdata�@@.rsrc0 "@@.��}
lPP.��}$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg .rsrc$01(��.rsrc$02 ՠ(ȇ�x��'����/u��H�k���P^.��}��0�H�������%�������(�?@�EX�Fp�G��H��L��R��S��~���0��H��`��x�9��x�������������� ��8��P��h����������������3��4�r(�@�X�p�������� 0@P`p�������� 0@P`p��������'���(��d*��(,>�h.~��/R�<1��2���2��54�L9�`;t��>��B�Ef�lV�lg��m���s��4z<�p�,�����x���$�8
�\��
����:�<��������n�D�������N�T	�l",��#&��*��`/&��7��=d�MUI�����}J�`_����Ne�ֶ��n���������MUIru-RU745AL@>1;5<K =5 >1=0@C65=K.>4@>1=K5 A2545=8O =54>ABC?=K.A?><>30B5;L=K5 40==K5:#@>25=L 2>7459AB28O>8A: 5:><5=40F8O!AK;:8B7K2K	0B53>@8O=0;87H81:0@54C?@5645=85
=D>@<0F8O5@5:;NG8BL A?>A>1 =02830F88"BG5B Defender Diagnostic Insights17>@!5B52K5 :><<C=8:0F88
 0725@BK20=85>4:;NG5=854@02>>E@0=5=85	1=>2;5=>@>1;5<K A ?@>872>48B5;L=>ABLN@>1;5<K A :>=D83C@0F859CFA!?@02:0SR
5B 40==KE5 =0AB@>5=>%1 G.	654=52=>>A:@5A5=L5>=545;L=8:B>@=8:!@540'5B25@3OB=8F0!C11>B08:>340"5ABK A5B52KE :><<C=8:0F89"5ABK @0725@BK20=8O MDE"5ABK ?>4:;NG5=8O MDE#"5ABK @01>B>A?>A>1=>AB8 DC=:F89 MDE:BC0;L=K5 B5ABK MDE"5ABK ?@>872>48B5;L=>AB8"5ABK :>=D83C@0F88*"5ABK CFA (:>=B@>;8@C5<K9 4>ABC? : D09;0<)PA'"5ABK ASR (A>:@0I5=8O =0?@02;5=89 0B0:)	B:;NG5=>;>:8@>20BLC48B
54>ABC?=>"!;C610 %1 >BACBAB2C5B
54>ABC?=>58725AB=>5 A>AB>O=85@>F5AA$09;TmH���`e���5� ��a�
\g�3�  �����#PAZ��@ ��8�?#>Ic)�s �T9�F
 �_aQ  �D�K!&D\IO�D1>�Z�Uem�Fg��� q�@��[�2>T�Y<�:��[[V�� ��ZE\  �U]�� �>5"�T *<�	7 ����U_��� ���-B �M.!GOB Wo?8�9#PA
 57C;LB0BK
 57C;LB0BKE06<8B5 =0 AAK;:C "=0;87", GB>1K ?@>A<>B@5BL A2545=8O > @57C;LB0B0E.PA!2545=8O > :><?LNB5@5!2545=8O > :><?LNB5@5VMNameVMSize
VMLocationSubscriptionId
ResourceGroupVmId5@A8O!
'8A;> O45@'8A;> ;>38G5A:8E ?@>F5AA>@>2>B>:>2 =0 O4@>$878G5A:0O ?0<OBL 0A?>;>65=85 D09;0 ?>4:0G:8$"5:CI55 8A?>;L7>20=85 D09;0 ?>4:0G:8)07>2K9 @07<5@ 2K45;5==>3> D09;0 ?>4:0G:8"8:>2>5 ?>B@51;5=85 D09;0 ?>4:0G:8@8A>548=5=> : 4><5=C@8A>548=5=> : Azure ADPA>4:;NG5=> : @01>G59 >1;0AB8 CAB@>9AB20 Azure AD!>AB>O=85 @538AB@0F88@E8B5:BC@0 !@5<O 703@C7:8 A8AB5<K!8AB5<=K9 ?@>:A8-A5@25@ WinHTTP'#AB@>9AB2> 70@538AB@8@>20=> 2 AAD 8 MEMA#AB@>9AB2> =5 70@538AB@8@>20=> 8 =8:>340 =5 1K;> 70@538AB@8@>20=>%#AB@>9AB2> ?>4 C?@02;5=85< 035=B0 MDM #AB@>9AB2>< C?@02;O5B 035=B SCCM3@>1;5<0 A :>=D83C@0F859 Microsoft Endpoint Manager
1I89 A1>9@>1;5<0 A ?>4:;NG5=85<C#AB@>9AB2> 1K;> 70@538AB@8@>20=>, 8 B5?5@L 53> @538AB@0F8O >B<5=5=0%#AB@>9AB2> >68405B >B<5=K @538AB@0F88!1>9 =07=0G5=8O ?>;8B8:!1>9 >BG5B0 > ?>;8B8:0E*1I89 A1>9 ?@8A>548=5=8O : 381@84=>9 A@5455A>>B25BAB285 :;85=B0:H81:0 381@84=>3> @0725@BK20=8O   B>G:0 ?>4:;NG5=8O A;C61KH81:0 A5@B8D8:0B0"5?@028;L=0O =0AB@>9:0 AAD Connect
H81:0 DNS@>1;5<0 A8=E@>=870F88 G0A>2MDE 8 ConfigMgrEDR!2545=8O > Sense5@A8O Sense!>AB>O=85 A;C61K Sense >@30=870F88>4 CAB@>9AB20!GUID A>AB>O=8O 70I8BK >B A?CD8=30 !>AB>O=85 A;C61K DiagTrack (UTC)) 0725@=CB0 2>7<>6=>ABL 70I8BK >B A?CD8=305@A8O :>=D83C@0F88 Sense45=B8D8:0B>@ MachineAuthStartType A;C61K Sense/ 0A?>;>65=85 F5=B@0 >1@01>B:8 40==KE CAB@>9AB20>#AB@>9AB2> ?>4:;NG5=> ?>A@54AB2>< >?B8<878@>20==>3> A>548=5=8O:"8? 70?CA:0 ?><>I=8:0 ?> 2E>4C 2 CG5B=CN 70?8AL 09:@>A>DB!=B828@CA=0O ?@>3@0<<0 2 Defender-!2545=8O >1 0=B828@CA=>9 ?@>3@0<<5 2 Defender2!>AB>O=85 A;C61K 0=B828@CA=>9 ?@>3@0<<K 2 Defender25@A8O ?;0BD>@<K 0=B828@CA=>9 ?@>3@0<<K 2 DefenderD5@A8O <5E0=87<0 >1=0@C65=8O C3@>7 0=B828@CA=>9 ?@>3@0<<K 2 Defender45@A8O >1@01>BG8:0 0=B828@CA=>9 ?@>3@0<<K 2 Defender' 568< 0=B828@CA=>9 ?@>3@0<<K 2 Defender(0AB@>9:0 ?0@0<5B@>2 SSL 4;O Defender AV$>=D83C@0F8O ?@>:A8-A5@25@0 Defender,!>AB>O=85 A;C61K &5=B@0 157>?0A=>AB8 Windows3!>AB>O=85 A;C61K @01>B>A?>A>1=>AB8 Windows Security'!>AB>O=85 A;C61K ?@>25@:8 A5B8 Defender"!>AB>O=85 >A=>2=>9 A;C61K DefenderDefender 70I8I5= >B ?>445;:8&AB>G=8: 70I8BK >B ?>445;:8 2 Defender+A:;NG5=8O 87 70I8BK >B ?>445;:8 2 Defender 568< SmartLocker=B8H?8>=A:>5  2 Defender 568< 70I8BK A5B8 Defenderp@>25@LB5 :>=D83C@0F8N A5B8 8 C1548B5AL, GB> B@51C5<K5 URL-04@5A0 =5 701;>:8@>20=K. 
>?>;=8B5;L=K5 A2545=8O: %1ServiceURLs�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (CNC) CA?5H=> 7025@H5=0. %1 A @57C;LB0B0<8 %2�5 C40;>AL ?@>25@8BL ?>4:;NG5=85 : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8. 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8. 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (Cyber) CA?5H=> 7025@H5=0. %1 A @57C;LB0B0<8 %2�5 C40;>AL ?@>25@8BL ?>4:;NG5=85 : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (Cyber). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (Cyber). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (AutoIR) CA?5H=> 7025@H5=0. %1 A @57C;LB0B0<8 %2�5 C40;>AL ?@>25@8BL ?>4:;NG5=85 : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (AutoIR). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (AutoIR). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (SampleUpload) CA?5H=> 7025@H5=0. %1 A @57C;LB0B0<8 %2�5 C40;>AL ?@>25@8BL ?>4:;NG5=85 : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (SampleUpload). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (SampleUpload). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (MdeConfigMgr) CA?5H=> 7025@H5=0. %1 A @57C;LB0B>< %2PA�5 C40;>AL ?@>25@8BL ?>4:;NG5=85 : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (MdeConfigMgr). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (MdeConfigMgr). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (OneDs) CA?5H=> 7025@H5=0. %1 A @57C;LB0B0<8 %2�5 C40;>AL ?@>25@8BL ?>4:;NG5=85 : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (OneDs). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (OneDs). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2W@>25@:0 A5@B8D8:0B0 4;O >1;0G=>9 A;C61K Defender 4;O :>=5G=>9 B>G:8 CA?5H=> 7025@H5=0.B7K2 A5@B8D8:0B0 =5 ?@>25@5=.R>4:;NG5=85 : >1;0:C <>65B 1KBL =0@CH5=> 2A;54AB285 A1>52 ?@8 >B7K25 A5@B8D8:0B>2.�#1548B5AL, GB> A;54CNI85 URL-04@5A0 =5 701;>:8@>20=K: %1 8 %2. ;O ?>;CG5=8O 4>?>;=8B5;L=>9 8=D>@<0F88, ?>60;C9AB0, >1@0B8B5AL : %3. >4@>1=K5 A2545=8O >1 >H81:5 A<. 2 %4.]@>25@:0 ?>4:;NG5=8O : >1;0G=>9 A;C615 0=B828@CA=>9 ?@>3@0<<K 2 Microsoft Defender 2K?>;=5=0.X!1>9 ?@>25@:8 ?>4:;NG5=8O : >1;0G=>9 A;C615 0=B828@CA=>9 ?@>3@0<<K 2 Microsoft Defender.mA;8 0=B828@CA=0O ?@>3@0<<0 2 Microsoft Defender O2;O5BAO 20H8< >A=>2=K< 0=B828@CA=K< @5H5=85< 8;8 2K @5H8;8 2:;NG8BL @568< 1;>:8@>2:8 EDR, ?@>25@LB5, =5 701;>:8@>20=K ;8 ?>4:;NG5=8O : >1;0G=K< URL-04@5A0< 0=B828@CA0. ;O ?>;CG5=8O 4>?>;=8B5;L=KE A2545=89 A<.: https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirusG"5:CI55 A5B52>5 ?>4:;NG5=85 =5 O2;O5BAO ?>4:;NG5=85< A >?;0B>9 B@0D8:0.6A?>;L7C5BAO A5B52>5 ?>4:;NG5=85 A >?;0B>9 B@0D8:0. %1� A5BOE A >?;0B>9 B@0D8:0 <>65B >3@0=8G820BLAO DC=:F8>=0;L=>ABL 2708<>459AB28O A Defender MAPS; =0?@8<5@, =5 >B?@02;ONBAO 70?@>AK =0 ?>;CG5=85 M:AB@5==KE A83=0BC@ (=5>1E>48<K5 4;O ?>;L7>20B5;LA:8E 8=48:0B>@>2 2 4>?>;=5=85 : M:AB@5==K< A83=0BC@0<).ApproachingDataLimit: %1OverDataLimit: %1 >C<8=3: %1NetworkCostType: %1�@>25@:0 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (:>=D83C@0F8O ECS) CA?5H=> 7025@H5=0. %1 A @57C;LB0B>< %2C@>25@:0 ?>4:;NG5=8O : >1;0G=>9 A;C615 Microsoft Defender 4;O :>=5G=>9 B>G:8 (:>=D83C@0F8O ECS) 25@=C;0 >H81:C HTTP 502 Bad Gateway. -B> 8725AB=0O ?5@8>48G5A:8 2>7=8:0NI0O ?@>1;5<0 A> A;C61>9 Azure Application Gateway; >=0 <>65B CAB@0=8BLAO A0<>AB>OB5;L=>. >2B>@8B5 ?@>25@:C, 5A;8 ?@>1;5<0 A>E@0=O5BAO. %1 A @57C;LB0B>< %2�5 C40;>AL 2K?>;=8BL 2A5 B5AB>2K5 ?>4:;NG5=8O : URL-04@5A0< >1;0G=>9 A;C61K Microsoft Defender 4;O :>=5G=>9 B>G:8 (:>=D83C@0F8O ECS). 
!1>9 B5AB0 4;O A;54CNI53> URL-04@5A0: %1 A @57C;LB0B>< %2�A;8 2K ?;0=8@C5B5 2:;NG8BL C?@02;5=85 :>=D83C@0F859 157>?0A=>AB8 MDE, >1@0B8B5AL : A;54CNI59 4>:C<5=B0F88 4;O >7=0:><;5=8O A> A?8A:>< B@51>20=89.>445@68205<K5 ?;0BD>@<Kz#AB@>9AB2> =5 8<55B <8=8<0;L=>3> C@>2=O 8A?@02;5=89 4;O ?>4:;NG5=8O : A;C615 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 MDE: %1�0 CAB@>9AB25 CAB0=>2;5=0 @>;L A;C61 8<5= Active Directory. >445@6:0 :>=B@>;;5@>2 4><5=0 A59G0A 4>ABC?=0 2 ?@5420@8B5;L=>9 25@A88 8 B@51C5B 4>?>;=8B5;L=>9 =0AB@>9:8.�A;8 2K ?;0=8@C5B5 2:;NG8BL C?@02;5=85 :>=D83C@0F859 157>?0A=>AB8 MDE 4;O :>=B@>;;5@>2 4><5=0, >1@0B8B5AL : A;54CNI59 4>:C<5=B0F88.HA?>;L7>20=85 C?@02;5=8O ?0@0<5B@0<8 157>?0A=>AB8 =0 :>=B@>;;5@0E 4><5=0�#AB@>9AB2> @01>B05B ?>4 C?@02;5=85< 32-@07@O4=>9 >?5@0F8>==>9 A8AB5<K, :>B>@0O =5 ?>445@68205BAO 4;O ?>4:;NG5=8O C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 MDE.`1@0B8B5 2=8<0=85, GB> A1>@:0 ! CAB@>9AB20 =5 ?>445@68205BAO MDE 8 =5 <>65B 1KBL ?>4:;NG5=0: %17!?8A>: ?>445@68205<KE 25@A89 Windows A<. 2 MB>9 AB0BL5.H%1 =0 MB>< CAB@>9AB25 @01>B05B =0 C@>2=5 70I8BK, >B;8G=>< >B >68405<>3>.�>?>;=8B5;L=K5 A2545=8O > 70I8B5 PPL 8 55 206=>AB8 A<. 2 MB>9 4>:C<5=B0F88. A;8 ?@>1;5<0 A>E@0=O5BAO, >1@0B8B5AL 2 A;C61C ?>445@6:8 09:@>A>DB.PPL�1@0B8B5 2=8<0=85, GB> CAB0=>2;5==K9 =0 MB>< CAB@>9AB25 2K?CA: A5@25@0 B>;L:> Hyper-V, =5 ?>445@68205BAO MDE 8 =5 <>65B 1KBL ?>4:;NG5=: %1o1@0B8B5AL : 4>:C<5=B0F88 ?> ?>445@68205<K< 25@A8O< MDE 4;O ?>;CG5=8O A?8A:0 ?>445@68205<KE A5@25@=KE 2K?CA:>2.>445@68205<K5 25@A88 Windows!;C610 MDE Sense-!;C610 0=B828@CA=>9 ?@>3@0<<K Windefend (MDE)"!;C610 57>?0A=>ABL Windows WscSvc!;C610 Windows SecurityHealth!;C610 70I8BK A5B8 MDE WdnisSvcA=>2=0O A;C610 MDE DefenderPA:;O ?>;CG5=8O 4>?>;=8B5;L=KE A2545=89 >1@0B8B5AL : AB0BL5.�1@0B8B5 2=8<0=85, GB> MB>B :><?LNB5@ @01>B05B A CAB0@52H59 25@A859 ?;0BD>@<K Defender. 5@A88 ?;0BD>@<K AB0@H5 N-2 1>;LH5 =5 1C4CB ?>445@6820BLAO.2;0BD>@<0 0=B82@54>=>A=>3>  2 Microsoft DefenderX1@0B8B5 2=8<0=85, GB> =0 MB>< :><?LNB5@5 8A?>;L7C5BAO CAB0@52H0O 25@A8O O4@0 0=B828@CA=>9 ?@>3@0<<K Defender. >A;5 2K?CA:0 =>2>9 25@A88 ?0:5B0 ?>445@6:0 42CE ?@54K4CI8E 25@A89 >3@0=8G8205BAO B>;L:> B5E=8G5A:>9 ?>445@6:>9. >;55 @0==85 25@A88 ?5@5G8A;5=K 2 MB>< @0745;5 8 ?@54>AB02;ONBAO 8A:;NG8B5;L=> 4;O B5E=8G5A:>9 ?>445@6:8 ?@8 >1=>2;5=88.$=B828@CA=>5 O4@> Microsoft Defender�1@0B8B5 2=8<0=85, GB> =0 MB>< :><?LNB5@5 CAB0=>2;5=0 CAB0@52H0O 25@A8O <5E0=87<0 >1=0@C65=8O C3@>7.  5:><5=4C5BAO ?@8<5=8BL ?>A;54=NN 25@A8N <5E0=87<0 >1=0@C65=8O C3@>7 4;O >15A?5G5=8O >?B8<0;L=>9 70I8BK 8 A>2<5AB8<>AB8.61=>2;5=8O 0=B828@CA=>9 ?@>3@0<<K 2 Microsoft DefenderC01;N405BAO 2KA>:0O 703@C7:0 & Sense, 2K720==0O B@0D8:>< Sense NDRC>?@>1C9B5 ?@8<5=8BL 8A:;NG5=8O Sense EDR : A;54CNI8< ?@>F5AA0<: %1KA>:0O 703@C7:0 &^0 ?;0BD>@<5 MDE 70D8:A8@>20=> 2KA>:>5 ?>B@51;5=85 ?0<OB8 ?@8 8A?>;L7>20=88 B5:CI8E 25@A89 MDEKA>:>5 8A?>;L7>20=85 ?0<OB8!!1>8 ?@8 >1=>2;5=88 ?;0BD>@<K MDE#!1>8 ?@8 >1=>2;5=88 >1@01>BG8:0 MDEH81:8 >1=>2;5=8O A83=0BC@ MDE;!1>9 >1=>2;5=8O A83=0BC@ MDE, B0: :0: C65 70?CI5= M:75<?;O@j>648AL, ?>:0 2A5 M:75<?;O@K MpSigStub.exe 1C4CB 2KE>4><, ?@5645 G5< ?>2B>@8BL ?>?KB:C >1=>2;5=8O ?>4?8A8.K5 C40;>AL 8=8F80;878@>20BL A;C61C MDE Windefend, 8 >=0 7028A;0 =0 MB0?5 %1�5@5703@C78B5 :><?LNB5@ 8 >1=>28B5 ?;0BD>@<C Defender 4> ?>A;54=59 25@A88. A;8 ?@>1;5<0 A>E@0=8BAO, A>>1I8B5 >1 MB>< 2 :>@?>@0F8N 09:@>A>DB.K!;C615 Windefend MDE =5 C40;>AL 7025@H8BL @01>BC, 8 >=0 7028A;0 =0 MB0?5 %1i1=>28B5 ?;0BD>@<C Defender 4> ?>A;54=59 25@A88. A;8 ?@>1;5<0 A>E@0=8BAO, A>>1I8B5 >1 MB>< 2 09:@>A>DB.^A:;NG5=85 MDE AAK;05BAO =0 ?5@5<5==K5 A@54K (%1), :>B>@K5 =5 O2;ONBAO A8AB5<=K<8 ?5@5<5==K<8._@>A<>B@8B5 8A:;NG5=8O:
"%1"
GB>1K C1548BLAO, GB> >=8 AAK;0NBAO =0 ?@028;L=K5 ?5@5<5==K5 A@54K./5 C40;>AL ?>;CG8BL =0AB@>9:8 Windows Defender.�A;8 2K ?;0=8@C5B5 2=54@8BL C?@02;5=85 :>=D83C@0F859 CAB@>9AB2 MDE, >1@0B8B5AL : A;54CNI59 AB0BL5 4;O ?>;CG5=8O 4>?>;=8B5;L=KE A2545=89.:@>25@LB5, 70?CI5=0 8 4>ABC?=0 ;8 A;C610 Windows Defender.R0AB@>9:0 0=B828@CA=>9 ?@>3@0<<K 2 Microsoft Defender A ?><>ILN 3@C??>2>9 ?>;8B8:8"@51>20=8O : A>548=5=8NS0AB@>9:0 381@84=>3> ?@8A>548=5=8O : Azure Active Directory 4;O C?@02;O5<KE 4><5=>2>@B0; 157>?0A=>AB8 M365PAq#AB@0=5=85 =5?>;04>: ?>4:;NG5=8O, A2O70==KE A C?@02;5=85< 157>?0A=>ABLN 4;O Microsoft Defender 4;O :>=5G=>9 B>G:8;NG ?>;8B8: MDE ?> C<>;G0=8N%;NG A;C61K 40BG8:>2 MDE ?> C<>;G0=8N%CBL : :0B0;>3C :MH0 MDE ?> C<>;G0=8N(CBL : :0B0;>3C MDE Cyber   ?> C<>;G0=8N CBL : :0B0;>3C MDE ?> C<>;G0=8N,CBL : :0B0;>3C ProgramData MDE ?> C<>;G0=8N+CBL : 2@5<5==><C :0B0;>3C MDE ?> C<>;G0=8N,CBL : :0B0;>3C B@0AA8@>2:8 MDE ?> C<>;G0=8N�#40;8B5 :;NG8 @55AB@0, A2O70==K5 A AntiSpoofing, GB>1K 70AB028BL CAB@>9AB2> A35=5@8@>20BL =>2K9 70:@KBK9 :;NG 8 2K?>;=8BL ?>2B>@=CN @538AB@0F8N. K?>;=8B5 :><0=4C %1�5B 459AB289 4;O 2K?>;=5=8O.  ?5@8>4, =0G02H89AO A> 2@5<5=8 A>1KB8O Cyberthrottling, 40==K5 :815@157>?0A=>AB8 =5 ?>ABC?0;8 =0 ?>@B0; MDATP.�>?KB:0 ?>4:;NG5=8O MB>3> CAB@>9AB20 G5@57 Microsoft Monitoring Agent (MMA) 7025@H8;0AL A1>5<, B0: :0: MB>B <5B>4 ?>4:;NG5=8O =5 ?>445@68205BAO.�1@0B8B5AL : =0H59 251-4>:C<5=B0F88, GB>1K >?@545;8BL, :0:>9 <5B>4 ?>4:;NG5=8O ?>4E>48B 4;O >?5@0F8>==>9 A8AB5<K MB>3> CAB@>9AB20./>445@68205<0O :>=D83C@0F8O 4;O ?>4:;NG5=8O MDEA-B>B :><?LNB5@ A2O70= A >?@545;5==K< 845=B8D8:0B>@>< :;85=B0 AAD.�@>25@LB5, A>2?0405B ;8 845=B8D8:0B>@ :;85=B0 AAD MB>3> :;85=B0 MDE A 845=B8D8:0B>@>< :;85=B0 SCP 2KH5. 'B>1K C7=0BL 845=B8D8:0B>@ :;85=B0 MDE, >1@0B8B5AL : ?>@B0;C 157>?0A=>AB8 M365N#AB@>9AB2> ?>445@68205B 70I8BC >B A?CD8=30 8 =0E>48BAO 2 AB018;L=>< A>AB>O=88.BSharedSignatureRoot =0AB@>5= 8 4>ABC?5= 4;O CG5B=>9 70?8A8 SYSTEM.)>=D83C@0F8O SharedSignatureRoot 2 =>@<5.A=0G5=85 @55AB@0 SharedSignatureRoot =5 =0AB@>5=> 8;8 =54>ABC?=>.Y-B> 8=D>@<0F8O. @>25@LB5, >68405BAO ;8 :>=D83C@0F8O SharedSignatureRoot 4;O 20H59 A@54K.,0AB@>9:0 @0A?8A0=8O >1=>2;5=8O A83=0BC@: %15SignatureScheduleDay: %1, SignatureUpdateInterval: %2]@>25@LB5 ?0@0<5B@K @0A?8A0=8O >1=>2;5=8O ?>4?8A59 2 A>>B25BAB288 A B@51>20=8O<8 20H59 A@54K.K0AB@>9:0 ?;0=>2>9 ?@>25@:8 4;O 0=B828@CA=>9 ?@>3@0<<K 2 Microsoft Defender.SignatureDefinitionUpdateFileSharesSources: %1^@8 =5>1E>48<>AB8 ?@>25@LB5 8AB>G=8:8 8 =0AB@>9:8 D09;>2 A83=0BC@ A CG5B>< >A>15==>AB59 A@54K.SignatureFallbackOrder: %1V@8 =5>1E>48<>AB8 ?5@5A<>B@8B5 =0AB@>9:8 ?>@O4:0 @575@2=>3> 2K1>@0 A83=0BC@ 4;O A@54K.�1@0B8B5 2=8<0=85: =0 MB>< :><?LNB5@5 459AB2C5B ?>;8B8:0, @07@5H0NI0O 4>102;5=85 B>;L:> 4>25@5==KE 8740B5;59 =0 >A=>25 4><5=0. -B> <>65B ?><5H0BL @01>B5 40BG8:0 MDE, :>B>@><C B@51C5BAO CAB0=>28BL A5@B8D8:0BK 2 E@0=8;8I5 =0456=KE 8740B5;59.�>?>;=8B5;L=K5 A2545=8O A<. 2 AB0BL5. 
'B>1K 871560BL =5?@542845==KE ?@>1;5<, C40;8B5 A2O70==CN :>=D83C@0F8N 3@C??>2>9 ?>;8B8:8: D;038 ;>:0;L=>9 ?@>25@:8 ?>4;8==>AB8 = %1, D;038 ?@>25@:8 ?>4;8==>AB8 3@C??>2>9 ?>;8B8:8 = %2.TrustedPublishersPA]5 C40;>AL ?@>G8B0BL B>G:C ?>4:;NG5=8O A;C61K (SCP) 87 @0745;0 :>=D83C@0F88 Active Directory.I">G:0 ?>4:;NG5=8O A;C61K (SCP) A>45@68B =5?>445@68205<CN :>=D83C@0F8N: %1F">G:0 ?>4:;NG5=8O A;C61K (SCP) A>45@68B =5?>445@68205<CN :>=D83C@0F8N.y5 C405BAO ?@8A>548=8BL CAB@>9AB2> : Azure AD, B0: :0: 70?8AL SCP =0AB@>5=0 =0 ?@8A>548=5=85 CAB@>9AB20 : Enterprise DRS.T">G:0 ?>4:;NG5=8O A;C61K (SCP) =5 =0AB@>5=0 2 @0745;5 :>=D83C@0F88 Active Directory.e5 C40;>AL ?>4:;NG8BLAO : :>=B@>;;5@C 4><5=0 4;O ?>;CG5=8O A2545=89 > B>G:5 ?>4:;NG5=8O A;C61K (SCP).�1=0@C65=> =5A>>B25BAB285 <564C 845=B8D8:0B>@>< :;85=B0 AAD MB>3> :;85=B0 MDE 8 845=B8D8:0B>@>< :;85=B0 2 70?8A8 SCP MB>3> 4><5=0.�#1548B5AL, GB> 845=B8D8:0B>@ :;85=B0 AAD 87 20H53> :;85=B0 MDE A>2?0405B A 845=B8D8:0B>@>< :;85=B0 SCP, C:070==K< 2KH5. 'B>1K ?@>A<>B@5BL 845=B8D8:0B>@ :;85=B0 MDE, >1@0B8B5AL : 4>:C<5=B0F88.w#?@02;5=85 MB8< CAB@>9AB2>< >ACI5AB2;O5BAO 035=B>< SCCM; @5H5=85 ?> C?@02;5=8N 157>?0A=>ABLN MDE C?@02;OBL 8< =5 1C45B.�Configuration Manager ?@87=0= 548=AB25==K< F5=B@>< C?@02;5=8O 157>?0A=>ABLN. Defender 4;O :>=5G=>9 B>G:8 =5 1C45B C?@02;OBL ?0@0<5B@0<8 157>?0A=>AB8 =0 CAB@>9AB20E, :>B>@K5 C65 =0E>4OBAO ?>4 C?@02;5=85< Configuration Manager. 
'B>1K 87<5=8BL MB> ?>2545=85, CAB0=>28B5 ?5@5:;NG0B5;L "#?@02;5=85 ?0@0<5B@0<8 157>?0A=>AB8 A ?><>ILN Configuration Manager" 2 ?>;>65=85 "B:;". >?>;=8B5;L=K5 A2545=8O A<. 2 A;54CNI59 4>:C<5=B0F88.R#AB@>9AB2> ?>445@68205B 70I8BC >B A?CD8=30, => =0E>48BAO 2 =5AB018;L=>< A>AB>O=88.w7=0:><LB5AL A @5:><5=40F8O<8 2 A;54CNI59 AB0BL5. 
A;8 ?@>1;5<0 A>E@0=O5BAO, >1@0B8B5AL 2 A;C61C ?>445@6:8 09:@>A>DB.6Microsoft Defender 4;O :>=5G=>9 B>G:8   CVE-2022-232787Microsoft Defender 4;O :>=5G=>9 B>G:8   =0;8B8:0 C3@>7"BACBAB2CNB ?CB8 ?> C<>;G0=8N: %1.�#1548B5AL, GB> C:070==K5 >BACBAB2CNI85 ?CB8 ACI5AB2CNB 8 =5 ?5@58<5=>20=K. >7<>6=>, 20< ?>B@51C5BAO A>740BL >BACBAB2CNI85 ?0?:8 2 :>=B5:AB5 ;>:0;L=>3> :><?LNB5@0.X5 C40;>AL ?>4:;NG8BL MB> CAB@>9AB2> A ?><>ILN Microsoft Endpoint Configuration Manager.�-B0 ?@>1;5<0 <>65B 2>7=8:=CBL, 5A;8 @0745; @55AB@0 %1 >BACBAB2C5B 2 %2. 
'B>1K A>740BL >BACBAB2CNI89 @0745; @55AB@0, <>6=> 8A?>;L7>20BL A;54CNI55: %3K#AB@>9AB2> >B?@02;O5B 40==K5 =0 ?@>A@>G5==K9 845=B8D8:0B>@ >@30=870F88: %1.Z5>1E>48<> >B:;NG8BL CAB@>9AB2> >B MB>9 >@30=870F88, 0 70B5< ?>4:;NG8BL 53> : B5:CI59 >@30=870F88.
1@0B8B5AL 2 A;C61C ?>445@6:8 09:@>A>DB, 5A;8 C 20A =5B 4>ABC?0 : AF5=0@8N >B:;NG5=8O A C:070==K< 845=B8D8:0B>@>< >@30=870F88.
@8<5G0=85. 'B>1K ?@>A<>B@5BL B5:CI89 OrgID, ?5@5948B5 =0 ?>@B0; MDE 8 I5;:=8B5 8<O ?>;L7>20B5;O 2 ?@02>< 25@E=5< C3;C.&5=B@ 157>?0A=>AB8�1@0B8B5 2=8<0=85, GB> 2 6C@=0;5 OpsMgr =0 CAB@>9AB25 70D8:A8@>20=0 >H81:0 "03@C7:0 70:@KB>3> :;NG0 4;O A5@B8D8:0B0 ?@>25@:8 ?>4;8==>AB8 :;85=B0".}#40;8B5 8 ?5@5CAB0=>28B5 MMA (Microsoft Monitoring Agent) =0 MB>< CAB@>9AB25 8 2K?>;=8B5 ?@>25@:C, 5A;8 ?@>1;5<0 A>E@0=O5BAO.=5AB=>5 2@5<O =0 CAB@>9AB25 =5 A>>B25BAB2C5B 2@5<5=8 2 Azure.�@>25@LB5 B>G=>ABL CAB0=>2:8 A8AB5<=>3> 2@5<5=8 8 ?@028;L=>ABL 2K1>@0 G0A>2>3> ?>OA0.
A;8 MB> CAB@>9AB2> ?>4:;NG5=> : 4><5=C, ?@>25@LB5, 70?CI5=0 ;8 A;C610 "Windows Time" 8 A8=E@>=878@>20=> ;8 CAB@>9AB2> A 2@5<5=5< 4><5=0. 
;O ?>;CG5=8O 4>?>;=8B5;L=KE A2545=89 > =0AB@>9:5 8 C?@02;5=88 A8=E@>=870F859 2@5<5=8, >1@0B8B5AL : A>>B25BAB2CNI59 AB0BL5, GB>1K ?@>25@8BL B>G=>ABL <5AB=>3> 2@5<5=8 2 BIOS.WindowsTime^#AB@>9AB2> @01>B05B ?>4 C?@02;5=85< 1>;55 AB0@>9 25@A88 System Center Endpoint Protection: %1.�!;54C5B >1=>28BLAO 4> ?>A;54=59 4>ABC?=>9 25@A88, GB>1K >15A?5G8BL A>2<5AB8<>ABL 8 2>7<>6=>ABL @538AB@0F88 >1=0@C65=89 2@54>=>A=KE ?@>3@0<< =0 ?>@B0;5 157>?0A=>AB8 Defender 4;O :>=5G=>9 B>G:8.B@>87>H;0 >H81:0 2 ?@>F5AA5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8.#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0. -B> <>65B 1KBL A2O70=> A B5<, GB> CAB@>9AB2> =5 A>>B25BAB2C5B ?@5420@8B5;L=K< B@51>20=8O< 4;O :0=0;0 C?@02;5=8O Microsoft Defender 4;O :>=5G=>9 B>G:8.D@5420@8B5;L=K5 B@51>20=8O 4;O Microsoft Defender 4;O :>=5G=KE B>G5:B@>87>H;0 >H81:0 2 ?@>F5AA5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8.PA�#AB@>9AB2> CA?5H=> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> Microsoft Endpoint Manager =5 =0AB@>5= G5@57 F5=B@ 4<8=8AB@0B>@ 4;O 2:;NG5=8O :>=D83C@0F88 157>?0A=>AB8 Microsoft Defender 4;O :>=5G=>9 B>G:8.,0AB@>9:0 :;85=B0 Microsoft Endpoint Manager!>7=8:;0 ?@>1;5<0 A ?>4:;NG5=85<.#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0, :>B>@0O <>65B 1KBL 2K720=0 ?@>1;5<>9 A ?>4:;NG5=85<. 
@>25@LB5, GB> CAB@>9AB2> <>65B 2708<>459AB2>20BL A :>=5G=K<8 B>G:0<8 MDE.B>=5G=K5 B>G:8 Azure Active Directory 8 Microsoft Endpoint Manager+1I89 A1>9 ?@8A>548=5=8O : 381@84=>9 A@545.2#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0, 8 >?5@0F8>==>9 A8AB5<5 =5 C40;>AL 2K?>;=8BL 381@84=>5 ?@8A>548=5=85.
;O CAB@0=5=8O =5?>;04>: 381@84=>3> ?@8A>548=5=8O =0 C@>2=5 >?5@0F8>==>9 A8AB5<K >1@0B8B5AL : AAK;:0<.X#AB@0=5=85 =5?>;04>: A 381@84=K<8 CAB@>9AB20<8, ?@8A>548=5==K<8 : Azure Active Directory5A>>B25BAB285 :;85=B0.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0, B0: :0: 845=B8D8:0B>@ :;85=B0 Microsoft Defender 4;O :>=5G=>9 B>G:8 =5 A>2?0405B A 845=B8D8:0B>@>< :;85=B0 Azure Active Directory. 
#1548B5AL, GB> 845=B8D8:0B>@ :;85=B0 Azure Active Directory 87 20H53> :;85=B0 Defender 4;O :>=5G=>9 B>G:8 A>2?0405B A 845=B8D8:0B>@>< :;85=B0 2 70?8A8 SCP 20H53> 4><5=0.;H81:0 381@84=>3> @0725@BK20=8O   B>G:0 ?>4:;NG5=8O A;C61K.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 70?8AL B>G:8 A>548=5=8O A;C61K (SCP) =0AB@>5=0 =5:>@@5:B=>, 8 CAB@>9AB2> =5 C40;>AL ?@8A>548=8BL : Azure AD. -B> <>65B 1KBL >1CA;>2;5=> B5<, GB> SCP =0AB@>5=0 4;O ?@8A>548=5=8O : Enterprise DRS. 
@>25@LB5, C:07K205B ;8 70?8AL SCP =0 AAD 8 =0AB@>5=0 ;8 SCP 2 A>>B25BAB288 A @5:><5=40F8O<8. >?>;=8B5;L=K5 A2545=8O A<. ?> AAK;:0<."0AB@>9:0 B>G:8 ?>4:;NG5=8O A;C61KH81:0 A5@B8D8:0B0."#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0 87-70 ?@>1;5<K A A5@B8D8:0B>< CAB@>9AB20. 
!5@B8D8:0B CAB@>9AB20 ?@8=04;568B 4@C3><C :;85=BC. @>25@LB5, GB> ?@8 A>740=88 ?@>D8;59 A>1;N40NBAO @5:><5=40F88.@>D8;8 4>25@5==KE A5@B8D8:0B>2PA#5?@028;L=0O =0AB@>9:0 AAD Connect.5#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0 87-70 =5?@028;L=>9 =0AB@>9:8 AAD Connect. 
'B>1K >?@545;8BL ?@8G8=C, ?@5?OBAB2CNICN @538AB@0F88 CAB@>9AB20 2 AAD, @0AA<>B@8B5 2>7<>6=>ABL 70?CA:0 A@54AB2 CAB@0=5=8O =5?>;04>:.3!@54AB2> CAB@0=5=8O =5?>;04>: @538AB@0F88 CAB@>9AB2I!?5F80;L=K5 8=AB@C:F88 ?> CAB@0=5=8N =5?>;04>: 4;O Windows Server 2012 R2H81:0 DNS.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0 87-70 >H81:8 DNS. @>25@LB5 ?>4:;NG5=85 : =B5@=5BC 8 ?0@0<5B@K DNS =0 CAB@>9AB25. 54>?CAB8<K5 ?0@0<5B@K DNS <>3CB 1KBL =0 AB>@>=5 @01>G59 AB0=F88. 
;O :>@@5:B=>9 @01>BK Active Directory =5>1E>48<> 8A?>;L7>20BL DNS 4><5=0 (0 =5 04@5A <0@H@CB870B>@0). >?>;=8B5;L=K5 A2545=8O A<. ?> AAK;:0<.@>1;5<0 A8=E@>=870F88 G0A>2.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> 2 ?>B>:5 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 ?@>87>H;0 >H81:0. @>25@LB5 ?@028;L=>ABL CAB0=>2:8 8 A8=E@>=870F88 G0A>2 =0 CAB@>9AB25, 345 2>7=8:05B >H81:0.!1>9 A:0G820=8O ?>;8B8:.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8. 4=0:> =5 C40;>AL A:0G0BL ?>;8B8:8 157>?0A=>AB8 :>=5G=>9 B>G:8 87 MEM. 
@>25@LB5, GB> CAB@>9AB2> <>65B 2708<>459AB2>20BL A :>=5G=K<8 B>G:0<8 MDE.!1>9 >B<5=K @538AB@0F88.�#AB@>9AB2> A59G0A 70@538AB@8@>20=>, => 53> @538AB@0F8N =C6=> >B<5=8BL. 4=0:> ?@>F5AA >B<5=K @538AB@0F88 7025@H8;AO A1>5< 87-70 2@5<5==>9 >H81:8. 
@>25@LB5, GB> CAB@>9AB2> <>65B 2708<>459AB2>20BL A :>=5G=K<8 B>G:0<8 MDE.!1>9 =07=0G5=8O ?>;8B8:.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8 8 A<>3;> A:0G0BL ?>;8B8:8 157>?0A=>AB8 :>=5G=>9 B>G:8 87 MEM. 4=0:> ?@8 =07=0G5=88 ?>;8B8: ?@>87>H5; A1>9.!1>9 >BG5B0 > ?>;8B8:0E.�#AB@>9AB2> ?>4:;NG5=> : Microsoft Defender 4;O :>=5G=>9 B>G:8 8 A<>3;> A:0G0BL ?>;8B8:8 157>?0A=>AB8 :>=5G=>9 B>G:8 87 MEM. 4=0:> ?@8 >B?@02:5 >BG5B0 > ?>;8B8:0E 2 MEM ?@>87>H5; A1>9.PAf-B> CAB@>9AB2> =5;L7O ?>4:;NG8BL 2 B5:CI5< A>AB>O=88, B0: :0: 53> ImageState 2 "%1" O2;O5BAO =5?>;=K<.�-B0 ?@>1;5<0 <>65B 2>7=8:=CBL, 5A;8 >1@07 ! 2K?>;=8; =5A:>;L:> ?>A;54>20B5;L=KE ?>?KB>: Sysprep 8 4;O @55AB@0 7040=> 7=0G5=85 '%1'.
A;8 ?@>1;5<0 A>E@0=O5BAO, >1@0B8B5AL 2 A;C61C ?>445@6:8 09:@>A>DB.0!2545=8O > A>AB>O=88 ?@>3@0<<K CAB0=>2:8 WindowsA=0G5=85 ImagePath 2 @55AB@5 <>3;> 1KBL ?>445;0=> 4> ?>4:;NG5=8O.v@>A<>B@8B5 MBC >H81:C 8 ?@>25@LB5 ImagePath (2 ?@545;0E %1), GB>1K C1548BLAO, GB> >= C:07K205B =0 4>?CAB8<K9 ?CBL %2.91=0@C65=K A>1KB8O Sense Cyberdata A >3@0=8G5=85< G0AB>BKMDE 8 ConfigMgr+#AB@>9AB2> C?@02;O5BAO A ?><>ILN Configuration Manager 8 Microsoft Defender 4;O :>=5G=>9 B>G:8. #?@02;5=85 ?>;8B8:0<8 G5@57 >10 :0=0;0 <>65B ?@825AB8 : :>=D;8:B0< 8 =565;0B5;L=K< @57C;LB0B0<. 
'B>1K MB>3> 871560BL, ?>;8B8:8 157>?0A=>AB8 :>=5G=KE B>G5: A;54C5B 87>;8@>20BL =0 >4=>< C@>2=5 C?@02;5=8O.C!>2<5AB=>5 8A?>;L7>20=85 A Microsoft Endpoint Configuration Manager!>AB>O=85 @538AB@0F88 87<5=5=>
#AB@>9AB2> C?@02;O5BAO A ?><>ILN Configuration Manager 8 Microsoft Defender 4;O :>=5G=>9 B>G:8.  538AB@0F8O CAB@>9AB20 2 @5H5=88 C?@02;5=8O :>=D83C@0F859 157>?0A=>AB8 1K;0 >B<5=5=0, B0: :0: 87<5=8;0AL >1;0ABL ?@8<5=5=8O 8;8 4;O CAB@>9AB20 1K; C40;5= B53 MDE-Management.�!8AB5<=0O ?5@5<5==0O A@54K %%TEMP%% (8 %%TMP%%) =5 >?@545;5=0. -B> <>65B ?@825AB8 : A1>O< 2 @01>B5 Windows Defender 8 4@C38E A8AB5<=KE :><?>=5=B>2, 8A?>;L7CNI8E 2@5<5==K9 :0B0;>3.�?@545;8B5 ?5@5<5==K5 A@54K TEMP 8 TMP. =0G5=85 ?> C<>;G0=8N 4;O A8AB5<=KE CG5B=KE 70?8A59: %%SystemRoot%%\TEMP. #1548B5AL, GB> MB>B ?CBL ACI5AB2C5B, 8 GB> 7040=K =5>1E>48<K5 @07@5H5=8O.�0B0;>3 %%TEMP%% =54>ABC?5=. -B> <>65B ?@825AB8 : A1>O< 2 :><?>=5=B0E 0I8B=8:0 Windows, :>B>@K< B@51C5BAO 70?8AL 2@5<5==KE D09;>2.i#1548B5AL, GB> :0B0;>3 %%TEMP%% ACI5AB2C5B, 0 B5:CI0O CG5B=0O 70?8AL 8<55B @07@5H5=8O =0 GB5=85 8 70?8AL.�;O :0B0;>30 %%TEMP%% 7040= ?CBL, >B;8G=K9 >B ?CB8 ?> C<>;G0=8N. @8 8A?>;L7>20=88 =5AB0=40@B=>3> ?CB8 : TEMP <>3CB 2>7=8:=CBL ?@>1;5<K 2 @01>B5 :><?>=5=B>2, @0AAG8B0==KE =0 8A?>;L7>20=85 @0A?>;>65=8O ?> C<>;G0=8N.PA�@>25@LB5, O2;O5BAO ;8 8A?>;L7>20=85 =5AB0=40@B=>3> ?CB8 %%TEMP%% ?@54=0<5@5==K<. A;8 MB> =5>6840==>, A1@>ALB5 A8AB5<=K5 ?5@5<5==K5 A@54K TEMP 8 TMP 4> 7=0G5=89 ?> C<>;G0=8N (%%SystemRoot%%\TEMP 4;O A8AB5<=KE CG5B=KE 70?8A59).P�>��[ ��g� BR.! ���
T %�a msBB��!7 � (��3�a��g �K-��U�� ���B) H�W7_��T_.� cR7 ����� �] �K2��Y� B� ���8W ��� ������c �/� ` (�7� �|�� �M��3 ��Y _�U�Q�[) �;g�!�4B�O8, g=M8 �c +] SQA�<m�F� BQ 3mO� B=�  �>Y8_@�
 c� ��1) �^JS o�:� �_U�Ma. 
� �S m�3� )9��Wm�c�OD M8 �Z �Kg7!Y��/�; u��% Q�7�7Y ��Y "8��1);g �<.!4_� Y��.!3 c� e'7 �O�/�<M. /; zi3T|f'Va <4A=�F� R�] ���>� �Q ��2��S� ��� c� mV_[W�# @S<�_[�M a ��W U��_BY� :T� �_\�_c.!<_�SO7;g�9�3�<�g_^5O��
a_M?[�.�d[+_ A� '�@I �� g� � ��O�SM; �U�< 33� ��Yc� ]��q3Vc^ @U�Fc] 1U �� �Zf� �A
�F�B �k:> A�HBS>< �TYm�U_��D] 3� <�U[W; �M� $6� �_\�Ue7<__33�KcM?B3�!Z�B_���+	5[_^.!?]�. "R5 ��3<�a[�1 [ ��F9� �Q3 �"�� �
���Ie 4U�: %1N <�a� D�c B[� eR�[ ]Y�S ��7[ 8O� [�� B% m�39 ������� �!5Kg �DUg�>:5.��D��+T �TKe �OY �QI8B��B UTO�Y] )[ ��e ��]e�:<.!� �K c=)[ ������. �� /] 35��<m���� e� +�a��>! e'� 9� �Q � ��Y Q�c�m�< ��W�OY< 	 �D� �S1e�eV�� �@02�>�e�QU. � �Y <O� W ��Y<�c��8 YT�5W BM �= ��A�m.!Fg�g��?F;2�0Y �+9��a ]U�QW[ B1 e%Q ��A��_��c M��I�.!� �QW 8���Ig ]MY�-�TY��B-A+U �_aW#Km�H� ��B�O� ����WY5 2M�4�UT >� �[ ��@:>H��! 5D�)Y��m��g �Y��2:M([): %1&�[� ����� ��U [�	.!UU�i>B� �9L1Y e1 /�WQ_��e Q�QDS �OY 9�@��H� �H H�U �JB e� ��H >�0 c=� �I@>/ e UT�S-ew @�B���U ���m �. ����Y, �'U ��[ 0 ���!�YM ��O�H BR 0_U-#9<��g M� c[� @�BV�7[. 
 �@T�[ Ym��� �;^ ;> -56�aBW? @�e%(_) �UMm BR� �L��M ]w[eQm �9�-Y��<79B ��W+�2@(a).5�c �9��YO�mM;g �4SW�2B�[ /K B'7 ^�[g7< 
��gY�@  ��7!i��>-
)] �U]�!;<T�e ���>_O� �	oW�� [/�� �9<V� � ��3 `%�W� `�RMqB�I (� Z) �_  �L@� �  �' ���	.=b= Q���T H0_ ]_�a]�q>:� �H2O�Y�� gQ ��
O�_��e �Q�HMU ��Y ?�@1V�� � ��_ �L! �� �>��:�� c'7 7�@���g a7��Y�g^ @M!��a �S�< �. 
 ��IQ���, g%MY.! �4U 0 ��BiW� �Y�H B%7 �[_W�<� B �� �R� �M@-�W_ �� g� � � <�m�c��/�9 c=�e ��� �
�O u%F �� Z^ �] IL@Q�. 
  B�[5 A��c�e �	��[��e ak��1Wg ��W _[�_B�?
�.M�Q�+	� �] K�g ��-e�-��Q �� �U �1B [��M ��c�-[�M��WK! 4@�JV>�c� ��!��5.��!Q�a Q�[sYM ��s .!@@�� B'� 35��<m�?�5� a7�O�B� @�cAR �Q �WOg�� g'� .!��	� �SO< U�����;!, ��3 m�YM �I���m�e��  Y.!��W e� c[.! @)�8a.PA0�/YMUQ�e �5�Q?M� ��3 9��Q�9e - V�-2022-232782�A��a��� .!���TS ��3 ;���Ic - "[��B �D�:�g��_WM��A� �[ YF?�+� u�c[ �� �@� �3[/QI �� �% �W�U�_��g ����S �QS ������B � UHa�UM @[ F��g eR� [�8U�S BO ��_��� ��� [��� ��g�m�> @Y��Q�g��9 �� [e�L�<-B�.5��AY�aQ�B ���8�QU �1U -8@�-Ic ���0g.! �Q3 �� \� ]MY��'Va <�	[�� R_ ��V@�� B� �FJ��Y� 0U �_ZT�]M.�� A��]R� �W�9 -K�c��<�~���M� @[�aM �>U "�>� �J.�:@.
 b% �Y3�Y �3�< g= 	��U= ��[: %1f'W[ A4� [�@�� �� �R� `�\f� ��	��9g O�a  1g '��� �7Y<)_U���_ B� �W-c5 g� B% �@�
B� @�c= (�S�#Um�4B\���SQ_Q�c\�-F�M�[ ���KY ����.! d=S�e  W�eM	�V��\!�25Y).
 �@Q[� ��:��c eR� A] �� g%� ��g= ��� U�aT� g[� ��Ym)U_�QH[ �31m ��O��e ��:�MY �� 97Q�.E����� -a �K�)-[����+9# ��LB Loe �] 9�B CM� �M#+Uc�T� �-c= 	!�m�.l >��a F]�U� A��F��BV�V�� e� ���� <Os� �? p�� ] -[ �>B 2BQA87. >9��e ��AO�_Q�� ]o��1O� �� �]U�Q ��YU�[B_.M� 
����!oW�c��  1� ����TD�w Va @3��QFB�D E�c��3� �O�g��B�O8 �Y�m a��3eV�.T >�].! U��Mu cR�] �3��W <UU� e� ����3]eD� c%� 2!1�\��! -[U�M �� YU�!�M �g: %1aZ�@@���� d�  �/@[Wa �O7  �B D�J<�� �F BR�a m��%-I�. "=Wa 	? ����c 
18?��W���� cM � >O��.� B_ V;_�	c e=Q ��;���W� ��[QWa (I�e%�I &6=\Z�� d��/\��>�
��[\����>a��g\U��e�!S�=�\��F�)FOe��D\^\� \00010002) B� ��[�S.! �e �MIg�/D] m+��<mm U�q�-Y� V@[.!UU ��3 ���5�c��)eC g� � �@>m�.")@RQ� Uq�BU ��� �;` �q�)OQm cabfA\ 1.2 	>-�H� �O���	OB �a FQ� 59�2<M� �? g[�] m��[W8M. �=�a ��K ���e A�9?�c���c^ B� ��� �:�q�.��!��_� 
�K�)Om B%0g ��\ 1.2 
>�9e -[ M �JB.!� (��e[�8 6� �\^^b\�WW�H�����U�!�g\� �FeU1<\`_S+BC�O��/O_\\
��?\ OQe��@a\f;^ 1.2\!>��H�).PAX�$ A��%�O_ 0U.! ?�� 7��2!� Q  cR�U <�
%�I�. "[WU AI ����g A�;8g��/�� g�  �@Q��.��@7]Q MK�WWm B[g -& 6���=0�#��!!�U�BR< �U �D�2BM (H�e'�; &��\^^f�\� �OU�c
�9gW�:Zg\�;eU�>\\�FY�g��OM����Y_\������ \6wEAR08!��<�S�B'<[\
�).*a� �/�  B_e ��/@���C�eH�U\ U>e7
B��� �1m�MDQ?B �] �U�J:� �W ��V:� n= 
%TA8 gMU�. f=�U m� W8��
c� � �W]��� �� � �gI1O� S��)Y�e�O (�6: WU�� h<L��>B�).PA>=B@>;8@C5<K9 4>ABC? : ?0?:0<K5 C40;>AL 703@C78BL <>4C;L mde_cfa_evaluation   4803=>AB8:0 CFA =54>ABC?=00@>25@LB5 CAB0=>2:C MdeDiag 8 @538AB@0F8N <>4C;OL 6C@=0;0E =5 >1=0@C65=> A@010BK20=89 CFA (:>=B@>;8@C5<>3> 4>ABC?0 : D09;0<)559AB28O =5 B@51CNBAO   CFA @01>B05B 2 HB0B=>< @568<5F@>0=0;878@>20=K ?>4>7@8B5;L=K5 D09;K =0 ?@54<5B A>AB>O=8O 4>25@8O: %1l7CG8B5 D09; CfaTrustChecks.txt 2 4803=>AB8G5A:>< 2K2>45 4;O ?>;CG5=8O ?>4@>1=KE @57C;LB0B>2 0=0;870 4>25@8OJ%1 =5 ?>;L7C5BAO 4>25@85< CFA, B0: :0: >1@07 ?@>F5AA0 =5 ?@87=0= =0456=K<.{>102LB5 MB>B D09; 2 A?8A>: @07@5H5==KE ?@8;>65=89 8;8 A>7409B5 8A:;NG5=85 2 0=B828@CA=>9 ?@>3@0<<5, 5A;8 2K 5<C 4>25@O5B5.T%1 =5 ?>;L7C5BAO 4>25@85< CFA, B0: :0: 53> @>48B5;LA:89 M;5<5=B =5 ?@87=0= =0456=K<.T%1 =5 ?>;L7C5BAO 4>25@85< CFA, B0: :0: 53> @>48B5;LA:8< M;5<5=B>< O2;O5BAO AF5=0@89.J%1 =5 O2;O5BAO 4>25@5==K< 4;O CFA, B0: :0: 703@C78; =54>25@5==K9 D09;: %2.\%1 =5 O2;O5BAO 4>25@5==K< 4;O CFA, B0: :0: 2 =53> 2=54@5= :>4 87 =54>25@5==>3> ?@>F5AA0: %2.N>102LB5 MB>B D09; 2 8A:;NG5=8O 0=B828@CA=>9 ?@>3@0<<K, 5A;8 2K 5<C 4>25@O5B5.m>102LB5 8A:;NG5=85 4;O MB>3> ?@>F5AA0 2 0=B828@CA=CN ?@>3@0<<C, 5A;8 2K 5<C 4>25@O5B5 (8A:;NG5=85 ?@>F5AA0).@>F5AA: %1!>1KB8O CFA:  - 59AB285: %1, ?@8G8=0: %2!>1KB8O 70@065=8O:"  - TaintType: %1, TaintReason: %2 C:>2>4AB2>: %1(2E>645=89: %1)�ASR %1 GUID '%2' (8AB>G=8:: %3) A>45@68B =0G0;L=K5 8;8 :>=5G=K5 ?@>15;K 8;8 7=0:8 B01C;OF88, 87-70 :>B>@KE =5 C405BAO ?@8<5=8BL ?@028;>.g#40;8B5 =0G0;L=K5 8 :>=5G=K5 ?@>15;K 87 GUID ?@028;0 ASR 2 :>=D83C@0F88 3@C??>2>9 ?>;8B8:8 8;8 @55AB@0.�GUID ASR %1 '%2' (8AB>G=8:: %3) A>45@68B D83C@=K5 A:>1:8. GUID 4>;6=K 1KBL C:070=K 157 D83C@=KE A:>1>: (=0?@8<5@, 56a863a9-875e-4185-98a7-b882c64b5ce5).Z#40;8B5 D83C@=K5 A:>1:8 87 GUID ?@028;0 ASR 2 :>=D83C@0F88 3@C??>2>9 ?>;8B8:8 8;8 @55AB@0.�A:;NG5=85 ASR '%1' (8AB>G=8:: %2) A>45@68B =0G0;L=K5 8;8 :>=5G=K5 ?@>15;K 8;8 7=0:8 B01C;OF88, :>B>@K5 <>3CB ?@5?OBAB2>20BL A>2?045=8N 8A:;NG5=8O.j#40;8B5 =0G0;L=K5 8 :>=5G=K5 ?@>15;K 87 ?CB8 8A:;NG5=8O ASR 2 :>=D83C@0F88 3@C??>2>9 ?>;8B8:8 8;8 @55AB@0.�GUID ASR %1 '%2' (8AB>G=8:: %3) =5 O2;O5BAO 4>?CAB8<K< GUID. 68405<K9 D>@<0B: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (=0?@8<5@, 56a863a9-875e-4185-98a7-b882c64b5ce5).PA�A?@02LB5 GUID ?@028;0 ASR 2 :>=D83C@0F88 3@C??>2>9 ?>;8B8:8 8;8 @55AB@0, GB>1K 8A?>;L7>20BL 4>?CAB8<K9 D>@<0B GUID 157 ;8H=8E A8<2>;>2.��^� �E
!�a��D '%1' (a��UA: %2) 
�����?] � �4YM�e-���Ac>U^ ('..') ]!m�e. ��cQO UT[�<�+D '..' B[ ��c��� 5E�@��T� ���R <0C L7 <F= LY���Y B[�K B' <�BU@ �HB�w a�#!_gU, ]�>�I�@� .!E@�F��# e[Q 76
BkU-�K 2����� ��_ -�cH�� U	Q�Q.�V�@B�	Q c%� \� EA<o_�QK DgUw ��c%  �k!!w-�5U1<�� �Ja�!oBM @�e' e'�c �O7[ K�g 	O�g�VH '..' ]<;ga. 5���c ��W_)�KU O� )	S�_1�c �M�� ��S UQ5Mg ��K-���I-��< M6�B�U��? �Fe3+�a �c �����! <�0 B)<7.PA''B> B0:>5 Defender Diagnostic Insights?
Defender Diagnostic Insights   8=AB@C<5=B A0<>4803=>AB8:8, :>B>@K9 A>18@05B 8 0=0;878@C5B 4803=>AB8G5A:85 40==K5 8 D>@<8@C5B >BG5B 4;O CAB@0=5=8O ?@>1;5< A ?@>872>48B5;L=>ABLN 28@BC0;L=KE <0H8= Windows 2 Azure. >:C<5=B0F8O Windows ?> Defender Diagnostic Insights   %1.(! G53> <=5 =0G0BL ?@>25@:C MB>3> >BG5B0?/0G=8B5 A 2:;04:8 "17>@". 7=0:><LB5AL A @5:><5=40F8O<8 8 AAK;:0<8, GB>1K >7=0:><8BLAO A @57C;LB0B0<8. #7=09B5 > B><, :0: >=8 <>3CB ?>2;8OBL =0 ?@>872>48B5;L=>ABL, 0 B0:65 > @5:><5=40F8OE 4;O :>=D83C@0F89, >?B8<878@>20==KE 4;O ?>2KH5=8O ?@>872>48B5;L=>AB8. >?>;=8B5;L=K5 A2545=8O > ?@>25@:5 >BG5B0 %1.30:85 40==K5 A>18@05B Defender Diagnostic Insights?EDefender Diagnostic Insights A>18@05B A2545=8O > :>=D83C@0F88 28@BC0;L=>9 <0H8=K Windows, 48A:>2 8;8 ?C;>2 E@0=5=8O, AG5BG8:0E ?@>872>48B5;L=>AB8, ?@>F5AA0E A 2KA>:8< ?>B@51;5=85< @5AC@A>2, 6C@=0;0E 8 @07;8G=KE B@0AA8@>2:0E. >4@>1=K5 A2545=8O > B><, :0:85 40==K5 A>18@05B Defender Diagnostic Insights, 4>ABC?=K ?> AAK;:5 %1.PAP�P�P�P��H81:0 ?@8 2K?>;=5=88 <>4C;O CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8.

�@>87>H;0 >H81:0 ?@8 703@C7:5 <>4C;O CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8 87 D09;0.

� <>4C;5 CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8 ?@>87>H;0 A8=B0:A8G5A:0O >H81:0.

�@>87>H;0 >H81:0 ?0<OB8 2 CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8.

�@>87>H;0 >1I0O >H81:0 2 CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8.

�@>87>H;0 >H81:0 ?0=8:8 2 CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8.

�K?>;=5=85 CG5B=>9 70?8A8 ?>;L7>20B5;O A >3@0=8G5==K<8 ?@020<8 ?@5@20=> A83=0;>< >AB0=>2:8.

�5 C40;>AL 48=0<8G5A:8 =0AB@>8BL A=8<:8 :CG8 4;O ?@>F5AA0.

d4VS_VERSION_INFO����e��e?�StringFileInfo�041904B0LCompanyNameMicrosoft Corporation�=FileDescription1@01>BG8: 4803=>AB8:8 Microsoft Defender 4;O :>=5G=>9 B>G:8BInternalNamedefenderdiag.dll�ELegalCopyright� >@?>@0F8O 09:@>A>DB (Microsoft Corporation). A5 ?@020 70I8I5=K.ROriginalFilenamedefenderdiag.dll.muir)ProductName?5@0F8>==0O A8AB5<0 Microsoft� Windows��;FileVersion4.18.26060.3008 (df1b0eba8e0e68e7272235d6dea4de3285c715b9)DProductVersion4.18.26060.3008DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD�%0�%w	*�H��
��%h0�%d10
	`�He0\
+�7�N0L0
+�70	���010
	`�He b�^7�G�^#��=��AߠCW�
��
kAf��
�0��0��3zk�ճ��z0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
260219193722Z
261017193722Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
���
���xT�	�8+;�H'��h�<&�s�7\A}��;��_��=)ؔ6-� �9��
���5p^W�O���$:���dB�A�F�O�� 5��f��rvYRU_t���%�
0��b4�^����=��݌vOr�5��HT	�d���)#r�'ҳ'ϙ;��V����%=�(R64.���o�u��+j��
���A��`p�5�]�N0>iv�W��o��[3T�z+�:4aCCl@�U>���r#uN^7���v0�r0U%0
+�7
+0U��:�a8��B�~�J�$�(0EU>0<�:0810UMicrosoft Corporation10U
501107+5068660U#0��)9�ėx͐��O��|U�S0WUP0N0L�J�H�Fhttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl%200a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
��T?i�t���:�]�?�T]�hd��z������B���s��=�oY�^Sxg��+OU�J%⩺��v��/V�A���'a����Q���=5�\�����[ݻ�F,�`�
4�r�̅/�Ag�?�o�ԗ�E�H��BNN�,�g?���Q�Dp��t�
u��Wtu����
g�M.u���V&h�{�Mp�9��j�Â���,N�&&�-�ƶ��: FF�2󨺇0�P0��t\��&���؞p	>��ys0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1�0�
0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113zk�ճ��z0
	`�He���0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" �L�2;Ib>��PV{���H_^�-V.&?�JF�0B
+�71402��Microsoft��http://www.microsoft.com0
	*�H��
�H"���$j`|����g����ֲ��ELmk�h�T���=���"B�j�<���}�n�1͍[u2z�N�#�ʚJ�tz�����;b���V�=]����5o[q�-T
�\��{��ӯ̽���O]��RfG��D�~���������˒č|e�H��4v��8���|�GX���X�Bh���`_���<�>�G5h �J�{�y�����nE�%V�x̡NM��'{�.�(f5�V�ut���
9���0��
+�71��0�|	*�H��
��m0�i10
	`�He0�R*�H��
	��A�=0�9
+�Y
010
	`�He �t>�(R|Դ��@;ߓeX���D��c�c�u	jO�120260622202738.262Z0��Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:9200-05E0-D9471%0#UMicrosoft Time-Stamp Service���0� 0��3#O�`$S�+#0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
260219193957Z
270517193957Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:9200-05E0-D9471%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
���
����t��	&���#Pl[�K��&B�4�l[�L�'D
�j���
��J>j�
�2�o�\^��ݟ�2�Z-�a#�Dg���Q☩M��䎻�,�=nY� M�������9�pt�(g��(]�&]Jf��R��.�.8��9��\D#+*{�ݪk�
�/)K���Ҏ�'�>.vL�azUְ��;2��TP��ye �m��"���t�����ڛ� �Z$:M��S����)v��]M��'ADb2p�5u�x��G<�+w'�f����xk2@���D.Q0�И��4;���8�I�%S��7��,���ǽD��=c��)x>��JE�g�s�_����ɏ*� �z�0�`��@��L�И�/hJ*�(��o?Ub_w��B$�O���ϓ9`~<�٤Lj�����"��*���7��tB����O�����AY?����Rti�}@e,��{q��wx�~O�j��@[y���E��0�0_m��G{XM�]�����I0�E0U���o���c��A�P`,�V�0U#0���]^b]����e�S5�r0_UX0V0T�R�P�Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0�Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0U�00U%�0
+0U��0
	*�H��
��C�ϛi��p�\��,�
��j��m�9��7sS4�\p�=�L�X5��͞g'.<�3�h��Ju�jB5�e�N�H �d����`޲xB�An�u�J���i�j�xr��ᬨs	�0i��&)��*]An�����[]䣴����7����e��Р�a��:2s�<�z�Q�V�>�b���O:�[FϜ`�=6����ؔ��[ͯ���/��$�v���SH�
"�,��\��{��?��ۭ�w�[�4�G��NaiH��A���ר��X<��e'�Uٗ/SϪ�7)WE(�db�3>�R�؅}�d�<Z����=�b>�.���5,�ƃ�JZ�dQ1�2�G�	����&B
�j�	�q%]Hb�OA�B��66��i���J�K��.e!?�l#�W�o��W�X��B��BD�U�?�p��Mtgux��"}Q�#P���."k�ȟUf(�q{�����]��K'�園���Q֜�è~�>0�q0�Y�3��k��I�0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
���L�r!y���$y�Ղ��ҩlNu��5W�lJ�⽹>`3�\O�f��SqZ�~JZ��6g�F#���w2��`}jR�D���Fk��v��P�D�q\Q17�
8n����&S|9azĪ�ri����6�5&dژ;�{3��[~��R���b%�j�]�S���VM�ݼ��㑏�9,Q��pi
�6-p�1�5(�㴇$��ɏ~�T��U�mh;�F��z)7���E�Fn�2��0\O,�b�͹⍈䖬J��q�[g`���=� �s}A�Fu��_4���� }~�ٞE߶r/�}_��۪~6�6L�+n�Q���s�M7t�4���G��|?Lۯ^����s=CN�39L��Bh.�QF�ѽjZas�g�^�(v�3rק ��
�co�6d�[���!]_0t���عP��a�65�G������k�\RQ]�%��Pzl�r�Rą��<�7�?x�E���^ڏ�riƮ{��>j�.����0��0	+�70#	+�7*�R�dĚ���<F5)��/�0U��]^b]����e�S5�r0\U U0S0Q+�7L�}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0U%0
+0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��U}�*��,g1$[�rK��o�\�>NGdx���=13�9��q6?�dl|�u9m�1��lѡ�"��fg:SMݘ��x�6.���V����i�	�{�jo�)�n�?Hu��m��m#T�xSu$W�ݟ�=��h�e��V����(U'�$�@���]='�@�8���)�ü�T�B�������j�BRu�6��as.,k{n?,	x鑲�[�I�t�쑀�=�J>f;O���2ٖ����t��Lro�u0�4�z�P�
X�@<�Tm�ctH,�NG-�q�d�$�smʎ	��WITd�s�[D�Z�k
��(�g($�8K�n�!TkjEG����^O���Lv�WT	�iD~|�als�
��Af=i��AI~~���;����>�1Q������{��p���(��6ںL���
�4�$5g+�
�挙��"��'B=%��tt[jў>�~�13}���{�8pDѐ�ȫ:�:b�pcSM��m��qj�U3X��pf�M0�50����Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:9200-05E0-D9471%0#UMicrosoft Time-Stamp Service�#
0+8Eal�D�fz���#�0�j���0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
��0"20260622195248Z20260623195248Z0t0:
+�Y
1,0*0
��0v0M0
��b�06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
�Rjƌ�,a�a��t4���h�Zщ��U7�r�pa��}k���T���&
��π/"��=/���ZgKន���_^��k�8����ЕZk�y���zb��Ú�4%��5ЧF��q��i膭������k�rBi�;
̱���o߇p��*��ū�hĘvx^�/gt��,q60�)%����
^X%3zJL銵b���(6��eny85���r�zH�R=D���ԥL1�2j�^��v�1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103#O�`$S�+#0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" �ot�
�D+��d+�����a��C6����GĿ0��*�H��
	/1��0��0��0�� ��3,n��)���ƃ㼘���e/�@��0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103#O�`$S�+#0" ��2��������C��A�e'�l|��oa�1*�0
	*�H��
�L��&N8�<�{+/�c�����/�7M�E�l ��-�`ѣ�sL�����QY�
"�Ȭ�h�̃ϣ`�wh�vB�1��1�Ab��sW)@}_}\=����8��3�K�3qj������'��r�4�c�>�-{��L>@ݏ���0�#i����w)P���2�nw.�}
uAx�߫Z�{+�:�|v2���УO�̥�	�޳o� ΓC��š�2k�d�مPe��(�-i��m!zD��F��BbȐ�@Y���9e��}��a��;0	�8W��h�0*�Xt�\?�
�F]���,��3�%�h=�%f�_N��kE+�*_�h{@xz&���)�8������=�*n���#��V�P;���z[��oBKѣH,[�oT�Ӡ~����sd`���0�F�����FQE�렯���p�^:H5�/`�D�ޙ��${����J�� �ݨ��0Q�bq�� <�t���@L���"��Z�i����5!�����/��~�:;�t{

Youez - 2016 - github.com/yon3zu
LinuXploit