MZ�ÿÿ¸@¨º´ Í!¸LÍ!This program cannot be run in DOS mode. $É;=ß�ZSŒ�ZSŒ�ZSŒÓ¬ŒŒZSŒÓQ�ŒZSŒRich�ZSŒPEd†´V›Uð" ,€0Yä` (8.rdataà@@.rsrc @@´V›U lPP´V›U$¼¼€€8.rdata8.rdata$voltmdP�.rdata$zzzdbg .rsrc$01(ðþ.rsrc$02 žŽh%ÀS –�_§q‡‡5GbŽðê¹ïUkI-´V›Uð€0€H€ €€˜€°€%È€à€ø€€(€?@€EX€Fp€Gˆ€H €L¸€RЀSè€~€€€0€¼H€½`€ûx€9�€x¨€¶À€·Ø€¸ð€¹€º €»8€¼P€½h€¾€€¿˜€À°€õÈ€öà€3ø€4€r(€@€X€p€� °ÀÐàð 0@P`p€� °ÀÐàð 0@P`p€� °ÀÐàø'¸ä°(jä*âä, ä .¸äØ/”äl1¢ä2`äp2TäÄ4²äx8Bä¼;äÌ>²ä€AväøC¨ä Sxäcääüg@ää,ä0$äTàä4èäðäMUIÍþÍþ¸;å[g móí’ïê)PAEDRI-!9%-1 #4"0@'-#L 1-1 #4"0*20#42#-1 #4"0 #+1*-L# #+1*-8#L"GUID -*202#I-12#%-!A%*20#42# DiagTrack (UTC)+'2!*2!2#C2#I-12#%-!A%5H#1C I@'-#L 12#M2+H2-1 #4"0#+1* MachineAuthStartType #42#-1 #4"0!M2A+H5H1I(9"LI-!9%-8#L0-8#L#I-!C+I#42#H22#@ 7H-!H-5H%H-1'2 4@#4H!I-1' H'"% 7H-@I2C I1  5 Microsoft Defender AVI-!9% Defender AV*20#42# Defender AV@'-#L 1A%-#L! Defender AV2@'-#L 1#0-1 #4"0I2'2!%- 1"- Defender AV@'-#L 1-B#A#! Defender AVB+! Defender AV#2#M2+H2 Defender AV SSLOptions2#M2+H2#G- 5 Defender AV.*20#42#(9"L2##1)2'2!%- 1"- Windows(*20#42#*2 2'2!%- 1"- WindowsPA'*20#42##'*-@#7-H2"- Defender*20#42# Defender Core3Defender DI#12#I-12#AIDI-!9%B"#0*L55A+%H2#I-12#AIDI-!9%B"#0*L5- Defender8Defender !52#"@'I2#I-12#AIDI-!9%B"#0*L5B+! SmartLockerI-1*2"A'#L- Defender B+!2#I-1@#7-H2" DefenderPAzB##'*-2#M2+H2@#7-H2"-8A%0#'*-C+IAHC'H2 URL 5HM2@GD!HDI9%G- *M2+#1I-!9%@4H!@4!B#9: %1 ServiceURLs{2#*-2#@ 7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (CnC) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2“2#*-2#@ 7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (CnC) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#@ 7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (CnC) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2u*-2#@ 7H-!H-1 URL #42#%2'L Microsoft Defender for Endpoint (D @-#L) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2˜2#*-2#@ 7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (Cyber) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2˜2#@ 7H-!H-*-1I+!1 URL #42#%2'L- Microsoft Defender for Endpoint (Cyber) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2w2#*-2#@ 7H-!H-1 URL #42#%2'L Microsoft Defender for Endpoint (AutoIR) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2™2#*-2#@ 7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (AutoIR) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2 2#@ 7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (AutoIR) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2|*-2#@ 7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (SampleUpload) @*#G*!9#LA%I' %1 5H!5%%1L %2Ÿ2#*-2#@ 7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (SampleUpload) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2£2#@ 7H-!H-2#*-1I+!1 URL #42# Cloud - Microsoft Defender for Endpoint (SampleUpload) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2�2#*-2#@ 7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (MdeConfigMgr) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2›2#*-2#@ 7H-!H-1 URL #42#%2'L- Microsoft Defender for Endpoint (MdeConfigMgr) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2£2#@ 7H-!H-*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (MdeConfigMgr) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2z2#*-2#@ 7H-!H-1 URL #42# Cloud - Microsoft Defender for Endpoint (OneDs) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2˜2#*-2#@ 7H-!H-1 URL #42##0%2'L- Microsoft Defender for Endpoint (OneDs) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2Ÿ2#@ 7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (OneDs) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2]2##'*-'2!9I--C#1#-*M2+#1#42#%2'L- Defender for Endpoint @*#G*!9#LA%I'D!HDI*-2#@4-C#1#-N2#@ 7H-!H-#0%2'L-2!5'2!#H-@7H-2'2!%I!@+%'C2#@4-C#1#-�B##'*-C+IAHC'H2 URL H-D5ID!HDI9%G-: %1 A%0 %2 *M2+#1I-!9%@4H!@4! B#95H %3 *M2+#1I-!9%I-4%2B"%0@-5" C+I#'2 %4d2#*-2#@ 7H-!H-1#42##0%2'L-B#A#!I-1D'#1*- Microsoft Defender @*#G*!9#LA%I'W2#*-2#@ 7H-!H-1#42#%2'L-B#A#!I-1D'#1*- Microsoft Defender %I!@+%'J+2B#A#!I-1D'#1*- Microsoft Defender @GB %9 12#I-1D'#1*+%1-8 +#7-8@%7-5H0@4C I2B+!%G- EDR B##'*-C+IAHC'H22#@ 7H-!H-1 URL #0%2'L AV D!HDI9%G- *M2+#1I-!9%@4H!@4! C+I9: https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus>2#@ 7H-!H-@#7-H2"181D!HDI4H2#42#2!#4!2I-!9%>2#@ 7H-!H-@#7-H2"18194H2#42#2!#4!2I-!9% %1Ì@#7-H2"A4H2#42#2!#4!2I-!9%-2311L 12#32C2#*7H-*2#- Defender MAPS DI @ H 2#-%2"@ G#5 8@ 40D!H9*H ( 6H3@G*3+#11'H 5IA3+@--@+7-2%2"@ G#5 8@ 4)ApproachingDataLimit: %1OverDataLimit: %13%1B#!!4H: %1NetworkCostType: %1�2#*-2#@ 7H-!H-1 URL #42#%2'L Microsoft Defender for Endpoint (2#M2+H2 ECS) @*#G@#5"#I-"A%I' %1 5H!5%%1L %2*-2#@ 7H-!H-1#42#%2'L Microsoft Defender for Endpoint (2#M2+H2 ECS) *H7 HTTP 502 @@'"LD!H9I- 5H@G1 +25H#2@G#0"0F - Azure Application Gateway A%0-2AIDDII'"@- %-#'*--5#1I I21 +25I"1-"9H %1 5H!5%%1L %2ª2#@ 7H-!H-2#*-1I+!1 URL #42##0%2'L- Microsoft Defender for Endpoint (2#M2+H2 ECS) %I!@+%' 2#*-%I!@+%'*M2+#1 URL H-D5I: %1 B"!5%%1L %2l+28I-2#@4C I22#12#2#M2+H2'2!%- 1" MDE B#9@-*2##0-H-D5I*M2+#1#2"2#I-M2+A%-#L!5HDI#12#*1*8d-8#LD!H!5#01B#A#!AIDH3*8*M2+#12#@#5"!'2!#I-!2#12#2#M2+H2'2!%- 1" MDE: %1‡-8#L!52#42# 7H- Active Directory 41I-"9H 05I2#*1*81''8!B@!"1@G#8H1'-"H2A%0I-2#2#M2+H2@4H!@4!l+28I-2#@4C I22#12#2#M2+H2'2!%- 1" MDE *M2+#11''8!B@! B#9@-*2##0-H-D5I92#C I2#12#2#1IH2I2'2!%- 1"11''8!B@!w-8#LM2%1C I#04142# 32 4 6HD!HDI#12#*1*8*M2+#12#---#L2#12#2#M2+H2'2!%- 1"- MDEUB##2'H24%L OS --8#LD!HDI#12#*1*8B" MDE A%0D!H*2!2#---#LDI: %1DB#9'2!5I*M2+#1#2"2#@'-#L 1- Windows 5HDI#12#*1*86%1 -8#L5ID!HDIM225H#012#I-15H2D'IŠ*M2+#1I-!9%@4H!@4!@5H"'12#I-1 PPL A%0*2@+85H!5'2!*M21  B#9@-*2#5I 4H-H2"*1*8- Microsoft +21 +2"1!5-"9HPPLxB##2'H2#8H@ 4#L@'-#L Hyper-V @H21I5H41I-8#L5ID!HDI#12#*1*8B" MDE A%0D!H*2!2#---#LDI: %1NB#9@-*2#5H#-#1 MDE @7H-9#2" 7H-#8H-@ 4#L@'-#L5HDI#12#*1*8@'-#L 1- Windows 5H*1*8#42# MDE -1 #4"0#42# MDE AV Windefend$#42# WscSvc '2!%- 1"- Windows#42# Windows SecurityHealth&#42# MDE Network Protection WdnisSvc#42#+%1- MDE Defender&*M2+#1I-!9%@4H!@4! B#95H'2!‰B##2'H2@#7H-5IM2%1M221A%-#L! Defender @'-#L 15H%I2*!1" @'-#L 1A%-#L!5H@H2'H2 N-2 0D!HDI#12#*1*8-5H-D'Microsoft Defender AntiMalware PlatformB##2'H2@#7H-5I32I'"B#A#!B#A#!I-1D'#1*- Defender @'-#L 15H%I2*!1" +%12!5@'-#L 1A@C+!H 2#*1*8*-@'-#L 1H-+I20%%@+%7-@5"2#*1*8I2@4@H21I @'-#L 15H@H2'H21I0A*-"9HC*H'5I A%0!52#*1*82#-1@#I2@4@H21I0B#A#!B#A#!I-1D'#1*- Microsoft Defender¢B##2'H2@#7H-5I32I'"H2'#-I2'2!%- 1"@'-#L 15H%I2*!1" -A03C+IC IH2'#-I2'2!%- 1"@'-#L 1%H2*8@7H-#1#-2#I-1A%0'2!*2!2#*9*822#-1@B#A#!I-1D'#1*- Microsoft DefenderPAJ*1@2#C I2 CPU *9--1 #4"0@7H-22##1*HI-!9% NDR --1 #4"07%-M2I-"@'I Sense EDR DC I1#0'2#H-D5I: %1PA2#C I2 CPU *9?A%-#L! MDE 2#C I2+H'"'2!3*91@'-#L 1 MDE 1812#C I+H'"'2!M2*9#'2!%I!@+%'C2#-1@A%-#L! MDE$'2!%I!@+%'C2#-1@%D12# MDE!'2!%I!@+%'C2#-1@%2"@ G MDE?2#-1@%2"@ G MDE %I!@+%' @7H-2!5-4*A LM22-"9HA%I'_#-C+I-4*A L-#0'2#1I+!- MpSigStub.exe 2#M22H-5H0%--1@%2"@ G-5#1IMMDE Windefend Service D!H*2!2#@#5"!C I2DI*M2@#GA%0I2-"9H5H1I- %1e#5*2#L@#7H-A%0-1@@GA%-#L! Defender %H2*8 A%0+21 +2"1!5-"9H C+I#2"2D"1 MicrosoftG#42# MDE Windefend D!H*2!2#4#0DI*M2@#GA%0I2-"9H5H1I- %1N-1@@GA%-#L! Defender %H2*8A%0+21 +2"1!5-"9H#2"2D"1 Microsoft@2#A" MDE -I2-41'A#* 2A'%I-! (%1) 6HD!HC H1'A#-#0SB##'*-2#"@'I-8: '%1' @7H-C+IAHC'H2-I2-41'A#* 2A'%I-!5H9I-PA5D!H*2!2#@#5"C I2#M2+%1)0 Windows Defender DI\I281IC0C I22#12#2#3+H2-8#L MDE B#9'2!H-D5I@7H-I-!9%@4H!@4!A#'*-'H2#42# Windows Defender M2%1M22A%0*2!2#@I26DIDM2+H2B#A#!I-1D'#1*- Microsoft Defender B"C IB"2"%8H!I-M2+2#@ 7H-!H-SM2+H22#@I2#H'! Active Directory - Azure AD.#4*M2+#1B@!5H!52#12#-#L1%'2!%- 1" M365PA`AID1 +22#---#L5H@5H"'I-12#12#'2!%- 1"*M2+#1 Microsoft Defender for Endpoint5"LB"2" MDE @#4H!I5"L#42#@ @ -#L MDE @#4H!I @*I2D@#-#5A  MDE @#4H!I#@*I2D@#-#5 MDE Cyber @#4H!I@*I2D@#-#5 MDE @#4H!I)@*I2D@#-#5 MDE ProgramData @#4H!I(@*I2D@#-#5 1H'#2'- MDE @#4H!I&@*I2D@#-#52#42! MDE @#4H!I€%5"L#54*#55H@5H"'I-1 AntiSpoofing @7H-11C I-8#LC2#*#I25"L*H'1'C+!HA%0%0@5"-5#1I @#5"C I3*1H %1yD!H!5*4HC5HI-M2 C#0+'H2#0"0@'%25H@#4H!I5H Cyberthrottling @#4H!@+82#L cyberdata D!HD+%@I2*9H-#L1% MDATPy-8#L5I"2"2!---#LH2@-@L Microsoft Monitoring Agent (MMA) AH%I!@+%'@7H-2D!H#-#12#---#LB"C I'455IgB#99H!7---D%L-@#2@7H-M2'2!@I2C'H2'452#---#LC5H@+!20*!1#04142#--8#L5I$2#M2+H25H#-#12#---#L MDE*@#7H-@ 7H-!B"1 ID 9I@ H2 AAD 5H#08«B##'*-C+IAHC'H2 ID 9I@ H2 AAD 29I@ H2 MDE -8#1#+1*9I@ H2 SCP 5HA*-"9HI2 @!7H-I-2#92##089I@ H2 MDE -8 B#95H-#L1%'2!%- 1" M365PA6-8#L*2!2#I-12#%-!A%DIA%0-"9HC*20@*5"#FSharedSignatureRoot DI#12#M2+H2A%0*2!2#@I261  5 SYSTEM DI.2#M2+H2 SharedSignatureRoot #2@G4LH2#54*#5 SharedSignatureRoot D!HDI#12#M2+H2+#7-D!H*2!2#@I26DI{I-!9%5I@G@5"2#C+II-!9% - #'*-'H22#M2+H2 SharedSignatureRoot @GD2!I-2#*M2+#1* 2A'%I-!-8+#7-D!H)2#M2+H2M2+2#2#-1@%2"@ G: %15SignatureScheduleDay: %1, SignatureUpdateInterval: %2S#'*-2#1IH2M2+2#-1@%2"@ G-82!'2!M2@G*M2+#1* 2A'%I-!-8LM2+H22#*A2!M2+2#*M2+#1B#A#!I-1D'#1*- Microsoft Defender.SignatureDefinitionUpdateFileSharesSources: %1V#'22#1IH2A+%H5H!2-2#A #LD%L%2"@ G2!'2!M2@G*M2+#1* 2A'%I-!-8SignatureFallbackOrder: %1T#'22#1IH2%M215HC IA*A-%2"@ G2!'2!M2@G*M2+#1* 2A'%I-!-8²B##2'H2@#7H-5I!5B"2"5H-8 2C+I@4H!9I@"A#H5H@ 7H-7-DI2!B@!@H21I 6H-2#'@ @ -#L MDE 6HM2@GI-41IC#1#-D"15H@G9I@"A#H5H@ 7H-7-DI³*M2+#1I-!9%@4H!@4! B#9'2! @7H-+%5@%5H"1 +25HD!H24 C+I@-22#M2+H2B"2"%8H!5H@5H"'I---: H2*20 Local Authenticode= %1, H2*20 GP Authenticode = %2TrustedPublishersSD!H*2!2#-H28@ 7H-!H-#42# (SCP) 22#L4 12#M2+H2 Active Directory DIB8@ 7H-!H-#42# (SCP) !52#M2+H25HD!HDI#12#*1*8: %128@ 7H-!H-#42# (SCP) !52#3+H25HD!H#-#1oD!H*2!2#@ 7H-!H--8#L1 Azure AD DI @7H-2#0@5" SCP 9M2+H2C+I@I2#H'!-8#L1 Enterprise DRSV8@ 7H-!H-#42# (SCP) D!HDI#12#M2+H2C2#L4 12#M2+H2 Active DirectoryOD!H*2!2#@ 7H-!H-11''8!B@!@7H-@#5"I-!9%8@ 7H-!H-#42# (SCP) DIb!5'2!1A"I#0+'H2#+1*9I@ H2 AAD 29I@ H2 MDE -8A%0#+1*9I@ H2C#2"2# SCP -B@!-8œB##'*-C+IAHC'H2 ID 9I@ H2 AAD 29I@ H2 MDE -8#1#+1*9I@ H2 SCP 5HA*-"9HI2 @!7H-I-2#92##089I@ H2 MDE -8 C+I9@-*2##0-b-8#LDI#12#12#B"@-@L SCCM A%00D!HDI#12#12#B"B %9 12#12#'2!%- 1"- MDEnConfiguration Manager DI#12#"-!#1@G1'12#I2'2!%- 1"@5"+6H@5"' Defender for Endpoint 0D!H12#2#1IH2I2'2!%- 1"-8#L5HDI#12#12#B" Configuration Manager -"9HA%I' +28I-2#@%5H"A%%1)02#325I 80I-3+2#1IH212#'2!%- 1"B"*%1 Configuration Manager @G4 B#9I-!9%@4H!@4!C9H!7-2#C IH-D5IC-8#L*2!2#I-12#%-!A%DI AHD!H*2!2#-"9HC*20@*5"#DITB#9M2A0M2C'2!H-D5I 4H-H2"*1*8- Microsoft +21 +2"1!5-"9H0Microsoft Defender for Endpoint - CVE-2022-232787Microsoft Defender for Endpoint - 2#'4@#20+L 1"82!@*I2@#4H!I+2"D: %1€B##'*-C+IAHC'H2!5@*I25H+2"D5H%H2'6A%0"1D!HDI@%5H" 7H- 8-2M2@GI-*#I2B%@-#L5H+2"DI'"#4-#0PAL-8#L5ID!H*2!2#---#LH2 Microsoft Endpoint Configuration Manager DIm1 +25I-2@46IDI+2#54*#55"L %1 +2"D2: %2 @!7H-I-2#*#I2#54*#55"L5H+2"D 8*2!2#C I: %30-8#LM2%1#2"2D"1 ID -L#5H+!-2"8: %1 8'#---#L-8#L2-L#5I A%I'---#L-8#LD"1-L#181-8 4H-H2"*1*8- Microsoft +28D!H!5*44L@I26*#4L2#---#LI'" OrgID 1%H2' +!2"@+8: @!7H-I-2#9 OrgID 181 B#D5H-#L1% MDE A%0%45H 7H-9IC I5H!8!'2(9"L2##1)2'2!%- 1"sB##2'H2-8#L!5I-4%2  3%1B+%5"L*H'1'*3+#1C#1#-2##1#-'2!9I--D%@-GL C16 OpsMgrpB#-2#41IA%041I MMA (Microsoft Monitoring Agent) C+!H-8#L5I A%0#'*-'H21 +2"1-"9H+#7-D!H*@'%2I-4H-8#LD!H#1@'%2C AzureOB##'*-'H2@'%2-#0I-4H9I-A%01IH2B @'%2C+I9I-A%I' +2-8#L5I@ 7H-!H-1B@! B##'*-C+IAHC'H2#42# 'Windows Time' 32-"9H A%0-8#LDI 4B#D L1@'%2-B@!A%I' *3+#1I-!9%@4H!@4!@5H"'1'452#3+H2A%0'8!2# 4B#D L@'%2 B#9'2!@7H-#'*-C+IAHC'H2@'%2I-4HC BIOS 9I- WindowsTimeO-8#LM2%1@#5"C I System Center Endpoint Protection @'-#L 15H@H2'H2: %1‘8'#-1@#@G@'-#L 1%H2*85H#I-!C I2@7H-#1#-'2!*2!2#A%0-8 22#162##'+2!1%A'#LC-#L1%'2!%- 1"- Defender for Endpoint8@4I-4%2CB%'L2#12#2#3+H2I2'2!%- 1"è-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" -2@G@#20-8#LD!HH2I-3+@7I-I*3+#1 H-22#12# Microsoft Defender for Endpoint9I-M2+@7I-I*M2+#1 Microsoft Defender for Endpoint8@4I-4%2CB%'L2#12#2#3+H2I2'2!%- 1"Ú-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! Microsoft Endpoint Manager "1D!HDI#12#M2+H2H2(9"L2#12#@7H--8 22#M2+H2'2!%- 1"- Microsoft Defender for Endpoint.2#M2+H29I@ H2 Microsoft Endpoint Manager!51 +22#@ 7H-!H-@46IÚ-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" 6H-2@G@#201 +22#@ 7H-!H- #'*-'H2-8#L*2!2#*7H-*2#1%2"2 MDE DI@8*4I*8 Azure Active Directory A%0 Microsoft Endpoint Manager''2!%I!@+%'C2#@I2#H'!AD.#41H'Dõ-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1"A%0 OS D!H*2!2#3@42#@I2#H'!AD.#4DI 9%4L*3+#12#AID1 +2'2!%I!@+%'2#@I2#H'!AD.#4#01 OS=AID1 +2-8#L5H@I2#H'! Azure Active Directory AD.#49I@ H2D!H#1z-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-2 ID 9I@ H2- Microsoft Defender for Endpoint D!H#1 ID 9I@ H2- Azure Active Directory #'*-C+IAHC'H2 ID 9I@ H2- Azure Active Directory 29I@ H2 Defender for Endpoint -8#1 ID 9I@ H2C#2"2# SCP -B@!-8(I-4%2AD.#4 - 8@ 7H-!H-#42#~-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! @#-#L8@ 7H-!H-#42# (SCP) D!HDI#12#M2+H2-"H29I- A%0-8#LD!H*2!2#@I2#H'!1 Azure AD DI 6H-2@42 SCP 5H9M2+H2C+I@I2#H'! Enterprise DRS #'*-C+IAHC'H2#0@5" SCP 5ID"1 AAD A%0 SCP DI#12#M2+H22!A'24145H55H*8 *3+#1I-!9%@4H!@4! C+I9%4LM2+H28@ 7H-!H-#42#I-4%2-C#1#--8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-2I-4%2C#1#---8#L C#1#--8#L@G-9I@ H2-7H #'*-'H2!52#32!A'2414@!7H-*#I2B#D%LB#D%LC#1#-5H@ 7H-7-DIPA(2#M2+H25HD!H9I-- AAD Connect-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-22#3+H24%2C AAD Connect +2I-2##08*4H5H3C+I-8#LD!H*2!2#%0@5"1 AAD DI C+I42#2@#5"C I@#7H-!7-AID1 +2*@#7H-!7-1'AID1 +22#%0@5"-8#L<*M2+#1M2A0M22#AID1 +2@ 20- Windows Server 2012 R2I-4%2 DNS¡-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" @7H-2I-4%2 DNS #'*-2#@ 7H-!H--4@-#L@GA%0/+#7-2#1IH2 DNS -8#L 2#1IH2 DNS 5HD!H9I--2!221H@'4#L*@ 1 Active Directory 3@GI-C+I8C I DNS -B@!@7H-C+I32DI-"H29I- (A%0D!HC H5H-"9H-@#2@-#L) *3+#1I-!9%@4H!@4! C+I9%4L1 +22# 4L2,42Í-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! !5I-4%2CB%'L2#12#2#3+H2I2'2!%- 1" #'*-'H21IH22,42-"H29I-A%0 4L1-8#L5H@4I-4%22#2'LB+%B"2"%I!@+%'º-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' -"H2D#G2! -8#LD!H*2!2#2'LB+%B"2"'2!%- 1"%2"22 MEM #'*-'H2-8#L*2!2#*7H-*2#1%2"2 MDE DI2#"@%42#%0@5"%I!@+%'Æ-8#LDI#12#%0@5"-"9HC05I AHM2@GI-"@%42#%0@5" -"H2D#G2! #0'2#"@%42#%0@5"D!H*M2@#G@7H-2I-4%2 1H'#2' #'*-'H2-8#L*2!2#*7H-*2#1%2"2 MDE DI2#M2+B"2"%I!@+%'ª-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' A%0*2!2#2'LB+%B"2"'2!%- 1"-%2"22 MEM DI -"H2D#G2! !5I-4%2#0+'H22#3+B"2"#2"2B"2"%I!@+%'´-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' A%0*2!2#2'LB+%B"2"'2!%- 1"-%2"22 MEM DI -"H2D#G2! !5I-4%2#0+'H2#2"2-B"2"D"1 MEMWD!H*2!2#---#L-8#L5IDIC*20181@7H-2 ImageState 2"C '%1' D!H*!9#L«1 +25I-2@46IDII2-4!@!#04142#M2@42#"2"2! sysprep 4H-1+%2"#1I A%0#54*#591IH2@G '%1' 4H-H2"*1*8- Microsoft +21 +2"1!5-"9HI-!9%*20 Windows Setup:H2 ImagePath C#54*#5-29@%5H"A%H-5H0---#LeB##'*-I-4%25IA%0#'*- ImagePath ( 2"C %1) @7H-C+IAHC'H2 5ID"1@*I2 %2 5H9I-2#'@+82#L5H'8!#4!2D @-#L2I2-1 #4"0MDE A%0 ConfigMgr÷-8#LDI#12#12#B"C I Configuration Manager A%0 Microsoft Defender for Endpoint 2#'8!B"2"H21I*- H-2-23C+I@4I-1A"IA%0%%1LD!H6#0*L @7H-+%5@%5H"1 +25I B"2"'2!%- 1"-%2"2'#A"D"1 1I2#'8!@5"'92#-"9H#H'!1I'"1'12#2#3+H2 Microsoft Endpoint!*202#%0@5"!52#@%5H"A%ó-8#LDI#12#12#B"C I Configuration Manager A%0 Microsoft Defender for Endpoint -8#L9"@%4%0@5"2B %9 12#12#2#3+H2I2'2!%- 1" @7H-2-@2#11C I!52#@%5H"A%+#7-AG MDE-Management 93--2-8#L™D!HDIM2+1'A#* 2A'%I-!#0 %%TEMP%% (A%0 %%TMP%%) 6H-2M2C+I@4'2!%I!@+%'C Windows Defender A%0-!B@L#0-7HF 5H-2(1"D@#-#5 1H'#2'�M2+1'A#* 2A'%I-!#0 TEMP A%0 TMP H2@#4H!I7- %%SystemRoot%%\TEMP *M2+#11  5#0 #'*-'H2@*I2!5-"9HA%I'A%0!5*44L5H@+!20*!’D!H*2!2#@I26D@#-#5 %%TEMP%% DI 2#M2@42#5I*2!2#M2C+I@4'2!%I!@+%'C-!B@L- Windows Defender 5HM2@GI-@5"AI! 1H'#2'E#'*-'H2!5D@#-#5 %%TEMP%% -"9HA%01  5181!5*44L-H2/@5"™D@#-#5 %%TEMP%% 91IH2@G@*I25HD!HC HH2@#4H!I 2 TEMP 5HD!HDI!2#2-2M2C+I@41 +21-!B@L5H7-'H2@GM2A+H5H1I@#4H!IPA¤#'*-'H2@*I2 %%TEMP%% AM2+@-1IC+#7-D!H I2D!H24 C+I#5@ G1'A#* 2A'%I-!#0 TEMP A%0 TMP @GH2@#4H!I (%%SystemRoot%%\TEMP *M2+#11  5#0)LB##2'H2-8#L!57I5H32 MMA (Microsoft Monitoring Agent) +%2"#2"2# I2-8#L---#LD"1 Defender for Endpoint H22##'! ASC (+#7-5H@#5"'H2 Azure Defender *M2+#1@ 4#L@'-#L) -A0M2C+I%7I5HM22 MDE --@7H-+%5@%5H"1 +22#-1B+%2D @-#L *M2+#1I-!9%@4H!@4!@5H"'12##'! ASC 1 Defender for Endpoint B#9'2! MDE C AzuresD!H*2!2#---#L@#7H-5IDI @7H-2D!H!5*44L*M2+#1#54*#55"L HKLM_System_CurrentControlSet_Services_SenseÕ 6H-2@46I@7H-22##'2%4 1L#1)2'2!%- 1"-#4)1-7H +#7-+2D!H!5*44L'8!1I+!*3+#11  5 SYSTEM *3+#1 HKLM_System_CurrentControlSet_Services_Sense *44L5H*3+#11  5 SYSTEM 7-: %1=B##2'H2@ 4#L@'-#L5ID!HDI41I@-@LA#'!5H1*!1"¿D!HDI41I@-@LA#'!*M2+#1@ 4#L@'-#L#01%H2%C-8#L5I -A0M2C+I41I@-@LC+!H@7H-#0*44 2A%0'2!*2!2#C2#I-15H55H*8 *M2+#1I-!9%@4H!@4! B#9@-*2##0-G---#L@ 4#L@'-#L Windows D"1#42# Microsoft Defender for EndpointF@4'2!%I!@+%'C2#3+B"2" @7H-21'A#* 2A'%I-!H-D5I: %1Ý-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' A%0*2!2#2'LB+%B"2"'2!%- 1"-%2"22 MEM DI AH!5I-4%2#0+'H22#3+B"2" B#3@*I25HD!H!5-"9H--21'A#* 2A'%I-!#0I2'1IH21'A#* 2A'%I-!CA'8!#0g@4'2!%I!@+%'C2#3+B"2" @7H-2!52#@4C I2 Dynamic Fair Share Scheduling (DFSS) -8#L-8#L---#LD"1 Microsoft Defender for Endpoint @#5"#I-"A%I' A%0*2!2#2'LB+%B"2"'2!%- 1"-%2"22 MEM DI AH@4'2!%I!@+%'C#0+'H22#3+B"2" @7H-2I-31- API 5H-2@46I@!7H-@4C I2 DFSS B#4H-H2"*1*8- Microsoft @7H--'2! H'"@+%7-E-8#LD!H1*!1" A%0D!H!52##1C I'2!*2!2#C2#I-12#%-!A%ŽB##'*-C+IAHC'H28#1C IA@B#A#!#1#8'2!%- 1"5HA03@7H-I-1-8#L22#%-!A% *3+#1I-!9%@4H!@4! B#95H%4L0Microsoft Defender for Endpoint - CVE-2022-232787Microsoft Defender for Endpoint - 2#'4@#20+L 1"82!R-8#L3%132I'"@ @ -#L EDR - Microsoft Defender for Endpoint @'-#L 1@H2JB#-1@@ G@ -#L@7H-C+IAHC'H28!52#I-1A%0'2!@*5"#5H55H*8<2#-1@ Microsoft Defender for Endpoint *3+#1@ @ -#L EDR‘D!H*2!2#---#L@#7H-5IDI @7H-2 MsSense.exe +"8M22#0+'H21I-2#@#5"!C I2*M2+#1 TelLib.dll I-4%222#+"8M227-: %1ç 6H-2@46IDII21  5 SYSTEM D!H!5*44LC2#@5"D"1@*I25H2D'I (ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Cyber) B##'*-'2!9I-- ACL C@*I2A%0#5@ G*44L2B%@-#L+%1I2M2@GE-8#L*2!2#I-12#%-!A%DI AH"1D!HDI%0@5"1#0%2'LyB##'*-C+IAHC'H22#@ 7H-!H-1 EDRCloud CnC URL D!HDI9%G- 4H-H2"*1*8- Microsoft +21 +2"1!5-"9HJ2#3+H2+#7-2#6IH-13C+I2#I-1@#7-H2"D!H*2!2#@#4H!32DISB##'*-I-'2!A*I-4%25I@7H-M2'2!@I2C1 +22#%G-A%0AID1 +2: %1u2#@I2#+1* TLS 5HDI#12#*1*8D!HDI@4C I2C@#7H-5I *4H5I-2*H%#0H-2#@ 7H-!H-1#0%2'L MDEÑB##'*- cipher 5H3+H2D'I ( 2"C HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002) @7H-C+IAHC'H2 cipher 1I!52#@I2#+1*5H3@G1IH3*3+#12#@ 7H-!H-D"1#0%2'L MDE 8 cipher A%0I-3+ TLSkB#B-%D%@-GL TLS 1.2 D!HDI@4C I2@#7H-5I *4H5I-2*H%#0H-2#@ 7H-!H-1#0%2'L MDE�B#"7"1'H2D%@-GL TLS 1.2 @4C I2-"9H ( 2"C HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client)bD!HDI@4C I22#@I2#+1* ECDH @#7H-5I *4H5I-2*H%#0H-2#@ 7H-!H-1#0%2'L MDEšB#"7"1'H2 ECDH KeyExchangeAlgorithm @4C I2-"9H ( 2"C HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH)2#*- URL 7I2%I!@+%'‘-!B@L NetworkProtection 94C I2 +#7-D!HH22#*-2##'*- URL 6H-2H 5I6*201'@%5H"@*I2@#7-H2" (@ H Cisco Umbrella)2#@I26B%@-#L5H'8!FD!H*2!2#B+%!-9% mde_cfa_evaluation - 2#'44 1" CFA D!H#I-!C I2.#'*-2#41I MdeDiag A%02#%0@5"!-9%9D!H2##'+2 CFA (2#@I26B%@-#L5H'8!) C16(D!HI-M2@42#CF - CFA M222!4;'4@#20+L %1 D%L5HH2**1"*M2+#1*20'2!H2@ 7H-7-A%I'b#'2 CfaTrustChecks.txt C%%1L2#'44 1"*M2+#1%%1L2#'4@#20+L'2!H2@ 7H-7-B"%0@-5"E%1 D!HDI#1'2!@ 7H-7-2 CFA @7H-2#9#0'2#D!H@G5H#9I1U@4H!%C#2"2#A-5H-8 2 +#7-@4H!2#"@'I AV *M2+#1D%L5II28@ 7H-7-D%L5I@%1 D!HDI#1'2!@ 7H-7-2 CFA @7H-2D!H#9I1#2"2#A!H'H25;%1 D!HDI#1'2!@ 7H-7-2 CFA @7H-22@#L@G*#4LF%1 D!HDI#1'2!@ 7H-7-2 CFA @7H-2B+%D%L5HD!HH2@ 7H-7-: %2V%1 D!HDI#1'2!@ 7H-7-2 CFA @7H-29C*H@I2DB"#0'2#5HD!HH2@ 7H-7-: %25@4H!2#"@'I AV *M2+#1D%L5II28@ 7H-7-D%L5IH@4H!2#"@'I AV *M2+#1#0'2#5II28@ 7H-7- (2#"@'I#0'2#)PA #0!'%%: %1@+82#L CFA: - 2#M2@42#: %1 @+8%: %2@+82#L5H3C+I@*5"+2":" - TaintType: %1, TaintReason: %2 2#A03: %1(%1 @+82#L)PAhASR %1 GUID '%2' (A+%HI-!9%: %3) !5 H-'H2/AGM2+I2+#7-H-I2" 6H*2!2#I-1D!HC+IM2DC IDIZ@-2 H-'H2M2+I2A%0H-I2"--2 GUID  ASR C2#M2+H2B"2"%8H!+#7-#54*#5-8}ASR %1 GUID '%2' (A+%H5H!2: %3) !5'@%G52 I-#08 GUID B"D!H!5'@%G52 (@ H 56a863a9-875e-4185-98a7-b882c64b5ce5)K%'@%G52--2 GUID  ASR C2#M2+H2B"2"%8H!+#7-#54*#5-8t2#A" ASR '%1' (A+%HI-!9%: %2) !5 H-'H2/AGM2+I2+#7-H-I2" 6H*2!2#I-1D!HC+I!52#A"--22#19HDI_@-2 H-'H2M2+I2A%0H-I2"--2@*I22#A" ASR C2#M2+H2B"2"%8H!+#7-#54*#5-8•ASR %1 GUID '%2' (A+%H5H!2: %3) D!HC H GUID 5H9I- #9A5H2D'I: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxx (@ H 56a863a9-875e-4185-98a7-b882c64b5ce5)rAID GUID  ASR CB"2"%8H!+#7-2#M2+H2#54*#5-8@7H-C I#9A GUID 5H9I-B"D!H!5-1#0@4H!@4!×'%1' 2#"@'I ASR (A+%H5H!2: %2) !5@ G@!LD@#-#5+%1 ('..') +%12AID '..' A%I' @*I22#"@'I5H!5#0*44 2-2'I2'H25H#2"2#2!1'-1)#A0M2!2 B""2"2#"@'I-"H2@5"F @4-@5H1ICD'I¹A5H#2"2#"@'I ASR I'"@*I2*1!9#L5HDI#12#AID-"H2*!9#L5HD!H!5@ G@!L '..' Microsoft Defender @'-#L 1%H2*804@*#2"2#"@'I5HD!HC H!2#2C@'%2B+%2#M2+H22#2"2I-!9%@ 4%62#'44 1"- Defender 7--0D#øDefender Diagnostic Insights @G@#7H-!7-'44 1"A H'"@+%7-@-5H#'#'!A%0'4@#20+LI-!9%2#'44 1" A%013#2"2@7H- H'"AID1 +2#0*44 2-@#7H-@*!7- Windows C Azure @-*2##0- Defender Diagnostic Insights *3+#1 Windows 7- %1" 10@#4H!#'2#2"25IDI5HCå@#4H!II'"AG 2#'! #'*-3A03A%0%4L*3+#1I-!9%5H @#5"#9I@5H"'1%#0H-#0*44 22#32 A%0A'24145H55H*8*3+#12#3+H2@7H-@4H!#0*44 22#32 @#5"#9I@4H!@4!@5H"'12##'*-#2"2 %19I-!9%@ 4%62#'44 1"- Defender #'#'!I-!9%#0@ CöDefender Diagnostic Insights 0#'#'!I-!9%@5H"'1@#7H-@*!7- Windows 2#3+H24*L+#7-9%5H@GI-!9% 1'1#0*44 2 9IC I#1"2#*9 16 A%02#42!H2F #2"%0@-5"@5H"'1 4I-!9%5H Defender Diagnostic Insights #'#'!7- %1P€P€P€P€h\!5I-4%2@46I0@#5"C I!-9% LUA \!5I-4%2@46I0B+%!-9%D%L LUA `!5I-4%22D'"2#L@46IC!-9% LUA X@4I-4%2@5H"'1+H'"'2!3 LUA @@4I-4%21H'D- LUA <@4I-4%2 LUA Panic `2#3@42# LUA 911+'0B"*1  2+"8 €D!H*2!2#M2+H2*A G-.5AD2!4*M2+#1#0'2#DI ð4VS_VERSION_INFO½ïþ Öe Öe?NStringFileInfo*041E04B0LCompanyNameMicrosoft Corporationˆ0FileDescription%D2#'44 1" Microsoft Defender for EndpointBInternalNamedefenderdiag.dllp&LegalCopyright© Microsoft Corporation *'%4*44LROriginalFilenamedefenderdiag.dll.muif#ProductName#04142# Microsoft® Windows®�8FileVersion4.18.26070.9 (797b3603749206dfffe67a1cc891531b0a2cf438)> ProductVersion4.18.26070.9DVarFileInfo$Translation°PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD(0‚( *†H†÷  ‚'ø0‚'ô10  `†He0\ +‚7 N0L0 +‚70  ¢€010  `†He _x.uøQ×eeV¾P‹»i'gÆV¨i”â^ é­® ‚ 0‚a0‚I 3$]¢‘qà •ª$0  *†H†÷  0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230 260430183934Z 270429183934Z0p1 0 UUS10U Washington10URedmond10U Microsoft Corporation10UMicrosoft Windows0‚¢0  *†H†÷ ‚�0‚Š‚�‘4�bI‹¤pª%õx·3 mÿ¢­Ë�~ƒ§¼83`‚;P#tίe¤�Cþ #3å²&Á˜ ¯jçášè1zçõ•QÉ í,-åKMŽÁï_¼É¨$Ð8õ /åÛÈ?ˆÙvE¼¸Å^WxqÖeþ¸nQ¶vŽ’Ï—3�Iù~dÙÀBžoã¢KÚ>w/¶õçøLFþìæíìð "UÀ HP…Ò LRý.Âk'ümAѶËt·Õ« !N _Gã×ÿaE3ˆX‡2þr¤ª0É{:s¤ÿáV1!Üîiëa‚FÁ4›j8.�.šwk!‡G'à㉠¨X½ùnÌ�ž£«d%š&_'Ö9ïñö¿4Ë‘k[Åý;™Š?Ý9ÞÎÄ“ÙúˆÃx°…¿¹+vEÀÔ->ÔLþTÙ¨CÔ_ îþn#‰¹oÒ]y”¸Og”êáV½×gHG+?£òatØí„Ê®,1×^r-ˆ¼«‘°¦Ð15ôºtå�£‚�0‚‹0Uÿ€0U%0 +‚7 +0U+N°£îÜNÁ"Þêø‘»“è!˜ 0EU>0<¤:0810U Microsoft Corporation10U 500446+5079150U#0€†í ®?Z Ò=!UŸ1S"ø0ZUS0Q0O M K†Ihttp://www.microsoft.com/pkiops/crl/Windows%20Production%20PCA%202023.crl0g+[0Y0W+0†Khttp://www.microsoft.com/pkiops/certs/Windows%20Production%20PCA%202023.crt0 Uÿ00  *†H†÷  ‚°4Z ¾Ïÿ ß 1ÝŽ ú ÙË«5FÑðV£5­Ù;DÅ�-%ŒÛšði²Òø‚ÇÝú õà¹�âM¥ûÙr²'4¯Æ”¨­!I皸a08.Ëwq±ñ Ì”`Щç!É™O¤š·�¶{þõ‡þ±yÅìeNu÷ äjàŽÒ‚¶ºÌ”¨Xfæ­C ƒË¼çSÕ.” TÏQG¬å¾ýñ¦R«—|d5$ç²æÊÏk—¬ÏO÷½ëŠJ“ÑL3˜áê$À|žªÃ!&OÌ…X=½‹H\Ü\ þê¡{ÈPíΞ“ežÝ;¶Ï³b¯è'iN�àÔÛ²cå×ûß -fëŽxðï9™Çbã+‡V#)¥!Ëœ–yó‡ƒ^\ì);õÌW툊kLf3¹×úñšžS71¬§è ár­Póã`FVÒsaˆ†ê /C)Ò¨:Î/Њ$n¢Ehý1¢wÇo‚mGPžð�¸6Äh˜¦~ï¢!R¯‘ªÃ&À­òaÅùrÀÑ!4ý¯È BsˆwürÀ¦_ïewÕõ|­8äbPä§OÎB›_šLÐÁ;™þ¨Špöì5°zá»ÝÕÆÎ™/2Á)ìt°a‚è#Z¿\ãÔ� êlÔ(‹CRæ|ê3³!^ ÐBÍ$�̦»ÿV H©,Õ F�ÒD?”0‚±0‚™ 3…½V KøÈ!0  *†H†÷  0�ˆ1 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 230613183415Z 350613184415Z0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230‚"0  *†H†÷ ‚0‚ ‚Õ.å ]nqKÛÚHëÞòb!ŒNF›á-i©Y 3ŠÀ©'xû‚»v}†¬ Ç/gÛÀW†ó·ì@äSp©ƒ¼××’rKÒ³>’Ñeê)üVÑÆƒªo¯‚®[„Ÿyé¼2Ÿ•áñá—þŒ’æ‚ió]U`—Ë°Í´Ž¦ªâ¡˜�g†¢··xLôm%5¶„˜ƒuG<¦>#Í…Ò¥_x BÊf.‹¡Þ•FoÓà)˜ûçݹÜ<-©}ƒˆ Î­úÛÝ=p2è��y¥�Q¡ºô¾¨UAo•ìäCøĵ¤€��Z¬U~¾f*>™íP‰I!#è•x(Liišnjk¡I¾ŸsWLê�ß3uoÒøÄ¿ÀªÍX°-*e+ÆH$� „½y€¢\å˜ ÎÏn%ú8™÷€!°±¼_>™Ô¶ RH­0Æ¥>f»–~4ÜQb®o³=¦„�ª5?QI^©}ÖÒîæÚPøuéÙOÙlzp0H}q€À·RQ#¸èOÀ3 «J/­xw_ì W’Ÿ;Q5x?”EŠ‚pd„íû½§"H¬äi—'ư ü”<™œN¢¿›d"ôάk¥æóË¡¯¥<$Îìqº®Çès½Ñ…[*:Î4 Gª ìgÃc˜%,ðÁCXt�üEåñ‘�ìpŠ‚äŸîö‹ô»£‚F0‚B0Uÿ†0 +‚70U†í ®?Z Ò=!UŸ1S"ø0 +‚7  SubCA0Uÿ0ÿ0U#0€ÕöVË�è¢\bhÑ=”�[×ΚÄ0VUO0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *†H†÷  ‚‘0Bhß„Ý<˜oÈÿ³NrûœU˜åê|q¸çã5ÑÚr5˜²¸ówy^œHwœ•4½èA׫ò`’ 6Þ(×™ÏVäoàBRmûMv¸Æs%œ·¡ÍëDÁÙÝ �Д�(·Ã8-nöÁôE"}¨ÀK€“|§üÃlBæ£sûy‹¯½èŠ[÷µøQùçî…`riAjÑð/7ÍX ,!ê¦Nvw¤Z™¹Êù†* YÛºÓT“¶ éüJqîƾ·aÙÜ€‰rÍ?TƒAGµ�ÇÞ–éÉBÓésQ½’ÇW[4¡ŸY¶eɃÑ`™ ¼zÀ+�Áýt¬›ŒÔ8¦+[ge‘Ç< €WIñ§ 2i‚K ‹à Mñ�Ky¾ƒWÈ{ÔœGH“�²‹°†$¯ór9öêÔ{¨.ÉY´k®¸ó©…ÑÃ!ÐÜBtÂ�¶5çϼ߳�.Ïôò:¿Ý’aú¼5ʡ߸ήzå-ë{]vªZåÎàÃ\aLøltÂÍ÷ovµ s ¹°|jll8¨¹ÌU×ÿ¡pkJŸ»{þŒ×DqÛ‹`QÅÕúJzzùQ‰D²=ÌãEï_c E–oM0vÛáÝ�”UÎʃžƒUFœ„—Ù ˜—]’ýªk%Xa ¢ ÏÛýJbê^g|X\�©#ÍÉokPy/×p1‚`0‚\0j0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20233$]¢‘qà •ª$0  `†He �®0 *†H†÷  1  +‚70 +‚7 10  +‚70/ *†H†÷  1" ”ª£Ÿø~{Ê.X�¦@zÕátfßyj¢uµè0B +‚7 1402 €Microsoft¡€http://www.microsoft.com0  *†H†÷ ‚€=_#¬Wêä> /Ðg]h\'ŽhÌ59˜ê�±ÙùdÜÚ ;¢oÖôWÍ;ü÷ê";pyó8¡Ü’HAן¿ „ѤKˆüN±‘¥û{½° à#¬ãpÖ†¥jÖ«c_3!ÚC‰.Art{Èpõ{)D°ˆ?~�ð€ÈŽH"Íw7ÏR�`âT„ÑVÛÛðº^¢VÞ{Ñ?HJVí!¡ÀB!™©:å½1.•ÆÐÇZÌß@ æ`£O%Ç,sôÄ#Él_!^}»˜ªL§ÖÏáÆ�ËylSA„ $uîCc�î=š^¡áÍR”šÀùN ì!Ö;‰º°®Ù _Ì <¶ä•ˆ^ÕÛÆkýôkÛ’»…|kK>[ßç1"`_9„Õ n“ô;mÈ£‚¨�å~õ4ä�7Ðc–Ü4–þ“RÚÉK³Wíx¾DBïþUÔMùìýÝ…&ÒD�oÐØŸ@½ÌÓž¥Ñ"¦¸)Óií'²4�+�¬Jܘœ¥&ª¦ñ0Œ¡‚–0‚’ +‚71‚‚0‚~ *†H†÷  ‚o0‚k10  `†He0‚R *†H†÷   ‚A‚=0‚9 +„Y 010  `†He E‹°0Û ï ØÍ¾ Üh¤¯Ãð> æå,q·Ž.Ónâj_“b¼å20260721210211.028Z0€ô �Ѥ�Î0�Ë1 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:E002-05E0-D9471%0#UMicrosoft Time-Stamp Service ‚ì0‚ 0‚ 3)Õd*´—ò)0  *†H†÷  0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100 260219194007Z 270517194007Z0�Ë1 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:E002-05E0-D9471%0#UMicrosoft Time-Stamp Service0‚"0  *†H†÷ ‚0‚ ‚ž"Ñjã=h „¦Q™©`;%a.ûí[mÏÌϳÚÜ�_‘7墬¾q¥ÈTTÊ\Îå2Weõ<@SÎSÞOÕ�NgÂ~ªà9àH«ÿ�,r],õiªÌ«ù[Ê sà#&½TvAëÀ�ZxkX[˜é½¶{.¼7‘y­ ØWL –ËÆ¸X7g�¥Uíô‹ÅhY��Ù~�¶)�Ëðõ„HWS—K9&hMúªCð~uå¹èŒžqã?núÌÇ…“ R³N ='°§ð;^•£õ£>Ñš»¶Dƒ*𣧂Iü7rY-]kvkq©|D â4Q`fÌ©À]šz’5ù ~¶éœã‰�YZ�3 j0°¯Ø£˜Ç/ZSü/qh.nˆàöõyFú4û²D¶öþd”QgÍô+ànÓ,>”†ËËiw[3“wb2)Ì�¸Ïz6h’$ßt×xH{G�ä³–ñˆ¦é¾gë8 ý�6ûm“O¼’ZHIûÓ{;‹™ U,Ͳö©VQálÁ¨<8ÓÙï:Ø­Vç†Í}«soo†kWÚΘ­yÔ ¿óç¦&ûÞ�vÖ6çsbß&Ðö~|”a„ÝJ ª¯Ä8b|U‰fÄUêÇT� ) ()²É©œ!ÿ«¦X8/¼Þg�£‚I0‚E0U'ME¤‹ô¼Bö�ÛU£DÊ7ƒ;0U#0€Ÿ§]^b]ƒôåÒe§S5ér0_UX0V0T R P†Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0†Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0 Uÿ00U%ÿ 0 +0Uÿ€0  *†H†÷  ‚=ÁÎö•ÿÜÌ8iÓÔ÷<` 9q—ütâ:DîÝýê�J}”§ ÕÎ0Ÿ0ªcsH„»TijÝìÜo®Cq¯‰ãï­ ^Ǻ®?m$V V¸àè»eÐ{”WßGŸÜkI±È`ê'1¬Wuùù³PxÅ|ò%®”“êæÈ'oNü}~°ïY(eÿZ²iBanB´ÎG�WŽ÷š LZa¬6‘…»Cæ¤äŸâü4 ŸÄýUÍw?òZ %ê¾tîü°.¦xdk°Ô0‚q0‚Y 3Åçkž›I™0  *†H†÷  0�ˆ1 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 210930182225Z 300930183225Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100‚"0  *†H†÷ ‚0‚ ‚äá¦Lç´r! y¢Ë×$y½Õ‚ÓýîœÒ©lNuÈÊ5WölJàâ½¹>`3ÿ\OÇf÷•SqZâ~JZþ¸6g…F# µ�Ïw2Àè`}jRƒD·¦ŽFkóÅvõ†PÜÁDÈq\Q17  8n�íר&S|9azĪýri¯«¬ö6¾5&dÚ˜;º{3­€[~Œ�Rþ¶èb%ÜjÏ]ôþŽSÏÖì…VMïݼ�¤ã‘�²9,Qœépi Ê6-pŽ1È5(½ã´‡$ÃàÉ�~µT�ÜúU˜mh;šF½í¤®z)7¬ËëƒEçFnÊ2ÕÀ†0\O,âb²Í¹â�ˆä–¬J»¾q©[g`Þø’‘=ý Ïs}AšFuÍÄ_4݉Öý¥ }~üÙžEß¶r/Û}_€ºÛª~6ì6Lö+n¨Qè¿£Ñs¦M7t”4‚ðò·Gí§è™|?LÛ¯^ÂóÕØs=CNÁ39L޼Bh.ê„QFâѽjZasÊg¢^×(vâ3r×§ ðÂú ×co É6d‹[ ¦ƒ!]_0t‘””عPù ‰aó65„GÛÜÑý²ÔÅkö\RQ]Û%º¯PzlÅrï�ùRÄ…“À<Û7Ç?x«E¶õ‡^Ú�žriÆ®{··>jâ.­£‚Ý0‚Ù0 +‚70# +‚7*§RþdÄš¾‚‘http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *†H†÷  ‚�U}ü*­á,g1$[ážrKü©oê\¶>NGdx±“—=13µ9×Âq6?Údl|Ðu9m»1äÂ�ûlÑ¡”"îéfg:SMݘº¶xØ6.œ©‚V°¾‰èiຠî{ßjo¾)ËnØ?HuÙÞm‚ õm#TäxSu$W¹ÝŸóŽ=Æóhßeö¤Vª÷•¶(U'Ð$½@ ¿¶]='à@–8¬÷ù)‰Ã¼°T…B³ü ž‹‰çð j�Â�BRuŠ6ÂÃas.,k{n?, x鑲©[ßI£t ¼ì‘€Ò=æJ>f;O»†ú2Ù–ô�ö‘öÎÆtýöLro«u0Å4°zØPþ XÝ@<ÇTm�ctH,±NG-Áq¿dù$¾smÊŽ ½³WITdÙs×[DŽZ‘k Ÿ¤(Üg($º8Kšnû!TkjEG©ñ·®Èè‰^O�ÒÐLvµWT ±iD~|¡alsþ »ìAf=iýËÁAI~~“¾Ëø;ä·¿´Î>¥1Q„¼¿Á‚¢{‰�pþçµÐ(‰ �6ÚºLù›ÿ é4ø$5g+à ¸æŒ™Öá"êð'B=%”ætt[jÑž>í~ 13}¼Ëé{¿8pDÑ�ñÈ«:Š:bÙpcSM�î‚m¥Áqj´U3X³¡pfò¡‚O0‚70�ù¡�Ѥ�Î0�Ë1 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:E002-05E0-D9471%0#UMicrosoft Time-Stamp Service¢# 0+·¿Ø’;m±¡¾ÙÄÞ]\!*ûÒ/ÿ �ƒ0�€¤~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100  *†H†÷  î Ó0"20260721154211Z20260722154211Z0v0< +„Y 1.0,0 î Ó0 iÿ0Ô0 î cS06 +„Y 1(0&0  +„Y   0¡ ¡ 0† 0  *†H†÷  ‚oså!eþ±DLÑ3»•uÙº¹4‹ƒ,ÉÑNãˆÑÄ:^Of…Ѻ3K·‹Î…ÆIEUg©Æ -¨/n;lÜõ©j´TÒÄ[WhîÙT´xSBlWz±é¬¼C´(9?O䦢ÆéZðÇj°G¼�e,Âòæiq]Ž/<µ\(âŠ7BR>"Ûj>‹"C.Iïn‡î�56N4Å4ƒ(�CÝXŠY¦@‡J+æih�Ìî¾%õìná6Úæ*tð$øìjö@kéÈy‘ŠOž<ˆ¦¨ROÑ6’Û}‚Wî?×Â�À"mæw‘kßÑü¹e宾“a.ÌTWª1‚ 0‚ 0�“0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103)Õd*´—ò)0  `†He ‚J0 *†H†÷  1  *†H†÷  0/ *†H†÷  1" ÉŒå\˜îÉ÷ú¼–&Cq±TƪŸžsâþ0M»‘î¶0�ú *†H†÷  /1�ê0�ç0�ä0�½ ·Ê=ñ"¶ðÿ•+ĺlj>I8K`’b…S.z_h:º’0�˜0�€¤~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103)Õd*´—ò)0" H-€?Ž1? æ^¥A¨¾‰GDÀAojÿµ–*cb0  *†H†÷  ‚vEÄns½·w*˜[ }ý:¯��^Ës™sÆ�€ð'#Ì$ZÒ=±àL™w9ð�¶±°m×T †ÓõtöµˆÿV^¡œnP‹Šûß Ù­¿aGÃY!¤�«~ª½8Í„4ðu©&Åq±Á�$>b£%ÜZ'mGÿHÃB.rÕ4¼qMŒyVn�ŽJ[`ÎîwÚ $Yý– 8�[ ñ¡Xr¥U±›v»!C�ñû7ò=ž?ìQðcnqõvñÆä¬2¼I Ü™Xg^÷t€N¡ÙráN‘¸*®-"w!Càm»¿¿ñ\¿×3‚÷Ûà³Á�ªGúöe�„Èo™Xøï‘(�ZÜŠ,¥á[9<> ¹O~|xÎ…ÖüW÷Ök˜ÈÜCIíÜ¡Úg­XLïýÄ�"úŽU@ó }vÉó®DêÂ0ÉKç±ÞOø¤Æ«1Åf+ØÊrå„­