MZ@ !L!This program cannot be run in DOS mode. $;=ߍZSZSZSӬZSQZSRichZSPEdX=" ,|` (8.rdata@@.rsrc @@X= lPPX=$8.rdata8.rdata$voltmdP.rdata$zzzdbg .rsrc$01(.rsrc$02 {UMZg-゚ɘX=0H %(?@EXFpGHLRS~0H`x9x 8Ph34r(@X p             0 @ P ` p             0 @ P ` p       '( )H+,.:D//`<0257P:@< >M* Zj8_Hc,hmmp`s$v4~|  T\T  8 l`p MUISE "ƚaֶn MUI he-IL  .   . :         Defender      UpToDate     CFA ASRN/A   %1                  MDE  MDE   MDE   MDE     CFA (  )PA ASR (  )   %1          PA             SxS   EDR   PA0   ''     .      VMNameVMSize  VMLocationSubscriptionId ResourceGroupVmId OSVersion         PageFile  -PageFile    PageFile  - PageFile   - Azure AD     Azure AD    OS   Proxy  WinHTTP    - AAD - MEM       -  MDM  -  SCCM&  Microsoft Endpoint Manager                    - "  -        AAD Connect  DNS  MDE - ConfigMgr    "    &  supportedUris ( )0 customSupportedUris    ( ) EDR   Sense  Sense  Sense     GUID       DiagTrack (UTC)      Sense MachineAuth    Sense    (     *      MicrosoftPA Defender AV  Defender AV  Defender AV  Defender AV    Defender AV   Defender AV Defender AV!  SSL  Defender AV Proxy  Defender AV      Windows"     Windows      Defender    Defender" Defender     )       Defender+       Defender SmartLockerDefender       DefenderPA\       - URL   .   ,  : %1 ServiceURLss   - URL     Microsoft Defender    (CnC)  . %1   %2   - URL     Microsoft Defender    (CnC) .     - URL : %1   %2    - URL     Microsoft Defender    (CnC) .     - URL : %1   %2u   - URL     Microsoft Defender    ()  . %1   %2   - URL     Microsoft Defender    () .     - URL : %1   %2    - URL     Microsoft Defender    () .     - URL : %1   %2v   - URL     Microsoft Defender    (AutoIR)  . %1  %2    - URL     Microsoft Defender    (AutoIR) .     - URL : %1   %2    - URL     Microsoft Defender    (AutoIR) .     - URL : %1   %2|   - URL     Microsoft Defender    (SampleUpload)  . %1   %2   - URL     Microsoft Defender    (SampleUpload) .     - URL : %1   %2    - URL     Microsoft Defender    (SampleUpload) .     - URL : %1   %2|   - URL     Microsoft Defender    (MdeConfigMgr)  . %1  %2 PA   - URL     Microsoft Defender    (MdeConfigMgr) .     - URL : %1   %2    - URL     Microsoft Defender    (MdeConfigMgr) .     - URL : %1   %2u   - URL     Microsoft Defender    (OneDs)  . %1   %2   - URL     Microsoft Defender    (OneDs) .     - URL : %1   %2    - URL     Microsoft Defender    (OneDs) .     - URL : %1   %2E      Defender     .   .;         .z  - URL   : %1 - %2.   ,   %3.     ,   %4.L     -  Microsoft Defender  .D     -  Microsoft Defender . -  Microsoft Defender   -         EDR,    - URL   - AV  .    : https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus!     .   . %1       Defender MAPS, ,      (       ).ApproachingDataLimit: %1PAOverDataLimit: %1 : %1NetworkCostType: %1y   - URL     Microsoft Defender    ( ECS)  . %1   %2     Microsoft Defender    ( ECS)  HTTP 502  .         Azure    .      . %1   %2    - URL     Microsoft Defender    ( ECS) .     - URL : %1   %2PAT        MDE,      . P             MDE: %1}   '   Active Directory'.        Preview    .O        MDE   ,   .    X     32 ,         MDE.PAP         - MDE    : %14       Windows .)%1       .`    PPL   ,   .    Microsoft   . PPLa    Hyper-V       - MDE    : %1?   - MDE      . Windows    MDE MDE AV Windefend WscSvc  Windows SecurityHealth  Windows    MDE WdnisSvc   MDE Defender  ,  .j          Defender.     - N-2   .1     Microsoft Defender          -  Defender.     ,        .           .' -  Microsoft Defenderz        .            .' -  Microsoft Defender0    (CPU)   Sense NDR7     Sense EDR   : %1PA CPU < MDE       MDE      MDE   MDE    MDE+  MDE      K      MpSigStub.exe      .4 MDE Windefend      %1]      Defender  ,     - Microsoft.4 MDE Windefend      %1I  Defender     ,  - Microsoft.9-  MDE    (%1)   .F  - :  '%1'       .)     Windows Defender.P        MDE,      .'  Windows Defender  .I    -  Microsoft Defender    E    Azure Active Directory       M365PAM       Microsoft Defender   )   MDE   '   MDE   )    MDE   .       MDE Cyber     MDE/   MDE ProgramData   (    MDE   )    MDE   z                  .    %1`  .      Cyberthrottling,      MDATP.{       Microsoft Monitoring Agent (MMA),          .U              .   MDE$    AAD .   AAD   - MDE    SCP  .      MDE ,     M365(      .1 SharedSignatureRoot    SYSTEM.& SharedSignatureRoot  .7  SharedSignatureRoot     .I   -    SharedSignatureRoot    .     : %16SignatureScheduleDay: %1, SignatureUpdateInterval: %2B           .D      -  Microsoft Defender/SignatureDefinitionUpdateFileSharesSources: %1C           .SignatureFallbackOrder: %1=           .             .     MDE      . ,  .     ,      :    = %1,    GP = %2.TrustedPublishersO       (SCP)    Active Directory.3   (SCP)    : %10   (SCP)    .d     - Azure AD    - SCP    - Enterprise DRS.N       (SCP)    Active Directory.I            (SCP).U      AAD  - MDE     SCP   .t   AAD   - MDE    SCP  .      MDE ,  .I  -  SCCM   -     MDE.Configuration Manager     . Defender           - Configuration Manager.     ,     '    Configuration Manager'.     .*       .F    .    Microsoft   .3 Microsoft Defender    - CVE-2022-232781 Microsoft Defender    -     : %1.m        .         .E    Microsoft Endpoint Configuration Manager .g       %1  : %2.      ,   : %3'     : %1.            .    Microsoft        - OrgID . :    - OrgID ,   MDE       .  Z     '      '    OpsMgr.]   MMA (Microsoft Monitoring Agent)         .-      - Azure.        .     ,   'Windows Time'       .          ,       - BIOS . WindowsTimeF      System Center Endpoint Protection: %1.                 Defender   .&     .   - Microsoft Defender   .  ,      .            Microsoft Defender   .5   Microsoft Defender   &     .   - Microsoft Defender   .  , Microsoft Endpoint Manager             Microsoft Defender   .'      Microsoft  .   - Microsoft Defender   .  ,          .         MDE.B   Azure Active Directory     Microsoft   .   - Microsoft Defender   .  ,             .          .A     - Azure Active Directory-  .E   - Microsoft Defender   .  ,           Microsoft Defender         Azure Active Directory .     Azure Active Directory   Defender        - SCP  .&  -    .C   - Microsoft Defender   .  ,      (SCP)         - Azure AD.    - SCP   - Enterprise DRS.   - SCP   AAD - SCP  -   .   ,  .#        .   - Microsoft Defender   .  ,          .     .        .     AAD Connect.   - Microsoft Defender   .  ,          - AAD Connect.       - AAD,      .      ;     - Windows Server 2012 R2  DNS.O   - Microsoft Defender   .  ,         DNS.     /   - DNS .   - DNS     . Active Directory   - DNS      (  ).   ,  .  .   - Microsoft Defender   .  ,      .         .   .   - Microsoft Defender   .  ,           - MEM.         MDE.  .        .  ,        .          MDE.   .   - Microsoft Defender            - MEM.  ,     .  .   - Microsoft Defender            - MEM.  ,       - MEM.N        - ImageState   '%1'  .             Sysprep   - '%1'.    Microsoft   .    Windows6  ImagePath      .Q     - ImagePath ( %1)      %2 .,       SenseMDE - ConfigMgr   Configuration Manager - Microsoft Defender   .           .   ,           .6   Microsoft Endpoint Configuration Manager     Configuration Manager - Microsoft Defender   .       ,       MDE-Management  .    %%TEMP%% - %%TMP%%  .     - Windows Defender      .      TEMP - TMP.     %%SystemRoot%%\TEMP   .       .f %%TEMP%%  .      Windows Defender    .A  %%TEMP%%      /. %%TEMP%%      .  TEMP            .   %%TEMP%%    .  ,       TEMP - TMP    (%%SystemRoot%%\TEMP   ).L        MMA (Microsoft Monitoring Agent).   - Defender      ASC (   Azure Defender  ),       MDE     .      ASC  Defender   ,  . MDE - Azureb          HKLM_System_CurrentControlSet_Services_Sense.                 SYSTEM  HKLM_System_CurrentControlSet_Services_Sense.     SYSTEM : %1.        .         .          .   ,  ;  Windows  Microsoft Defender   8        : %1   - Microsoft Defender            - MEM.  ,     .           .#     O          (DFSS)  .   - Microsoft Defender            - MEM.  ,        API    DFSS .    Microsoft  .4        .d            .   ,  .3 Microsoft Defender    - CVE-2022-232781 Microsoft Defender    -  J       EDR  Microsoft Defender   /       .2 Microsoft Defender     EDRe   ,  MsSense.exe      TelLib.dll.   : %1      SYSTEM      (ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Cyber).             .*   ,    .c   URL  CnC  EDRCloud  .    Microsoft   .(       .=          : %1M TLS     .       MDE.     ( HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002)          MDE.   TLSR  TLS 1.2    .       MDE.x  TLS 1.2  ( HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client).G ECDH    .       MDE. - ECDH KeyExchangeAlgorithm  ( HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH).  URL  | NetworkProtection       URL.         (: Cisco Umbrella).[NetworkProtection URL check failed and a network redirector was detected (%1). Redirectors such as Cisco Umbrella proxy traffic through the local host, so NetworkProtection sees connections as originating from localhost and cannot determine the real destination. Uninstall the redirector, or reconfigure it so it no longer intercepts/proxies traffic on this device, then re-run the test.]F[Address false positives/negatives in Microsoft Defender for Endpoint]PA  :  mde_cfa_evaluation    CFA      MdeDiag6   CFA (  )     - CFA  $ %1      I  CfaTrustChecks.txt        > %1   - CFA      .b       -  AV         .7 %1   - CFA      .5 %1   - CFA     .9%1   - CFA      : %2.E%1   - CFA    -   : %2.; -  AV         .G -  AV         (  ). : %1  CFA: - : %1, : %2  :% - TaintType: %1, TaintReason:  %2 : %1 (%1 )PA[ASR %1 GUID '%2' (: %3)  /        .Q     - GUID   ASR      .ASR %1 GUID '%2' (: %3)   .    GUID    (, 56a863a9-875e-4185-98a7-b882c64b5ce5).M    - GUID   ASR     .e-  ASR '%1' (: %2)  /        -.Q      -  ASR     .ASR %1 GUID '%2' (: %3)  GUID .  : xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (, 56a863a9-875e-4185-98a7-b882c64b5ce5).PAi  - GUID   ASR         GUID    .'%1' -  ASR (: %2)     ('..').   '..'           ,        .   -  ASR        '..'.    Microsoft Defender        .    Defender?'   Defender'          ,           Windows - Azure.   Defender Diagnostic Insights  Windows %1.     ?  ' '.     .          ,         .      %1 .6    -    Defender?   Defender       Windows,     ,  ,   ,    .      -    Defender  %1.PAPPPPL     LUA. `       LUA. D    LUA. @   - LUA. <    LUA . <   - LUA. T  LUA  -  . x        . 4VS_VERSION_INFOee?jStringFileInfoF040D04B0LCompanyNameMicrosoft Corporation3FileDescription   Microsoft Defender   BInternalNamedefenderdiag.dll.LegalCopyright Microsoft Corporation. All rights reserved.ROriginalFilenamedefenderdiag.dll.muij%ProductNameMicrosoft Windows Operating System8FileVersion4.18.26080.4 (ccacee407da609d5c2c557d13db39624e32a0227)> ProductVersion4.18.26080.4DVarFileInfo$Translation PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD(0( *H '0'10  `He0\ +7N0L0 +70 010  `He ) Hf AȾ:b 0a0I3$]q $0  *H  0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230 260430183934Z 270429183934Z0p1 0 UUS10U Washington10URedmond10U Microsoft Corporation10UMicrosoft Windows00  *H 04bIp%x3 m˝~83`;P#tίeC #3& j1zQ ,-KM_ɨ$8 /?vE^WxqenQvϗ3I~dBoK>w/LF "U HP LR.k'mAѶtի !N _GaE3X2r0{:sV1!iaF4j8..wk!G' Xn̍d%&_'94ˑk[;?9ēx+vE->LTC_ n#o]yOgVgHG+?atʮ,1^r-15t00U0U%0 +7 +0U+NN"! 0EU>0<:0810U Microsoft Corporation10U 500446+5079150U#0 ?Z =!U1S"0ZUS0Q0OMKIhttp://www.microsoft.com/pkiops/crl/Windows%20Production%20PCA%202023.crl0g+[0Y0W+0Khttp://www.microsoft.com/pkiops/certs/Windows%20Production%20PCA%202023.crt0 U00  *H  4Z  1 ˫5FV5;DŐ-%ۚi Mr'4Ɣ!I皸a08.wq ̔`Щ!əO{yeNuj҂XfC ˼S. TQGR|d5$kOJL3$|!&O̅X=H\\ {PΞe;ϳb'iN۲c -fx9b+V#)!˜y^\);W툊kLf3S71 rP`FVsa /C)Ҩ:/Њ$nEh1womGP6h~!R&ar!4 Bswr_ew|8bPOB_L;p5zΙ/2)ta#Z\ԝ l(CR|3!^ B$V H, FD?003V K!0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 230613183415Z 350613184415Z0S1 0 UUS10U Microsoft Corporation1$0"UWindows Production PCA 20230"0  *H 0 . ]nqKHb!NF-iY3'xv} /gW@SpגrKҳ>e)Vƃo[y2i]U`˰ʹgxLm%5uG<>#ҥ_x Bf.ޕFo)ݹ<-}έ=p2蝁yQUAoCĵZU~f*>PI!#x(LiinjkIsWL3uoĿX-*e+H$ y\ n%8!_>Զ RH0ƥ>f~4Qbo=5?QI^}PuOlzp0H}qRQ#O3 J/xw_ W;Q5x?Epd"Hi'ư http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  0Bh߄æވ n0Yw"vZk᬴'m֠n]Io={Ǥ[CFjz{͝KՈGm Bmyv1 o1:c[=bq?UV~; ?"VO*)Br0 +710| *H m0i10  `He0R *H  A=09 +Y 010  `He t3_(.hS CKx0j $20260903180439.079Z0Ѥ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:7F00-05E0-D9471%0#UMicrosoft Time-Stamp Service0 03n9o|I0  *H  0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100 260219193949Z 270517193949Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:7F00-05E0-D9471%0#UMicrosoft Time-Stamp Service0"0  *H 0 8l<,G^:^l8mNvj\Kѹdsy$ CӪs\~׼[ Z0!*' aY<0//LzX(,X-tW=$߯HN]XHuRne{kbEE]jᐗoAMei.YF<[\Z܋0I99S>t  aċl3IԪ+&U4o.5_oW&?4:kOf+|!Y*OBN5ƹ;xLb=(]b6-%ԑJn4S2y ;LY1RA=.]fVT]o]vm]O(%5uJ*+PGD35^RN8hZj<9՝Nv&sE_Utd1b(]sFՉS*Kw,+3{+V'[>-I0E0U  fb\.<d0U#0]^b]eS5r0_UX0V0TRPNhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0 U00U% 0 +0U0  *H  y6rUp)Ѣy9ƶLX2`O6H|&zS}toI353 OH Ik\@,&Noq쪥CY3ױv5ٕ8 4k2j$.6)1fXb}+<([4}0?L'-G(jTՔK}n_G$5SdwS8n:-txXZ4@Bu8ۧw߄Tpu~jC 7(}\w<B`PĴ- _y>E-I|(-}x$`Bѣqqx+*:pmG,(:WFDO0} Y$^Ԋ>I5u1Zy)nw d':27|(|B>%N#Yơ\_͑8ߘvw/}E*^@ʋj%!fqjWUvb[4,Ci\kMZ0!60q0Y3kI0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 210930182225Z 300930183225Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0 Lr! y$yՂҩlNu5WlJ⽹>`3\OfSqZ~JZ6gF# w2`}jRDFkvPDq\Q17 8n&S|9azĪri65&dژ;{3[~Rb%j]SVMݼ㑏9,Qpi 6-p15(㴇$ɏ~TUmh;Fz)7EFn20\O,b͹⍈䖬Jq[g`= s}AFu_4 }~ٞE߶r/}_۪~66L+nQsM7t4G|?Lۯ^s=CN39LBh.QFѽjZasg^(v3rק  co 6d[!]_0tعP a65Gk\RQ]%PzlrRą<7?xE^ڏriƮ{>j.00 +70# +7*RdĚhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  U}*,g1$[rKo\>NGdx=139q6?dl|u9m1lѡ"fg:SMݘx6.Vi {jo)n?Hum m#TxSu$Wݟ=heV(U'$@]='@8)üTB  jBRu6as.,k{n?, x鑲[It 쑀=J>f;O2ٖtLrou04zP X@1Q{p( 6ںL 4$5g+ 挙"'B=%tt[jў>~13}{8pDѐȫ::bpcSMmqjU3XpfM050Ѥ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nShield TSS ESN:7F00-05E0-D9471%0#UMicrosoft Time-Stamp Service# 0+d(2R=j0~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100  *H  C0"20260903134221Z20260904134221Z0t0: +Y 1,0*0 C0 0(0 EI=06 +Y 1(0&0  +Y  0 00  *H  2=;qW_w{& خM"X? }nHbnZĆ^߬fswNLnLMj*&=s=^Dɴ4J]ù$)5g$ɂrj9wQx83.$kD 3뱖m5&Q'?0GI;5鯲Lv.@8M4p&O'(_fltc7n2B?TŶ1 0 00|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103n9o|I0  `HeJ0 *H  1  *H  0/ *H  1" ߇POGcbWzv`f+R{2y5Dփ6%OжS,oHÑ|l oD85-<Gf3[jmo%#_oRAا]TS!Z pR$ M(lwjI"j@ q/05zM0VPُYX_?Y5;|d:mE{wQ%tLIP6NxyY3tk2r}O\L-z!oiC4 -*f5:x,S2XƵ@nzj\?WF` vD?> i5Ya-vj%j mإu"љ0VYq@q!2k7j'i̍\KbCFK:XIw9H篓^Pn]Z>XZ7@3-BR9d_ثR\y;/JZ_>\Zu?APd@l