HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Program Files/Windows Defender/zh-TW/ProtectionManagement.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!H

p�@ E8.rdata�@@.rsrcP F@@�l5
T88�l5$��8.rdata8x.rdata$zzzdbg .rsrc$01%�.rsrc$02 ��%�P6��D�ǰ���$���(����u�l5��0�H���0�H�`�x�����������	�
 �8�P�
h������������� �!(�@�X�p�������� 0@P`p��������$���%Z�(���*@��,"�.���/&��1���2��4>�,6.�\7��X;���<���Cr�XG\��J���M��|Vh��X6�[�8\�� _�0a��MUI���yI\k���g0�g�
����v��NmuB�}���MUIzh-TW�/fo�:y�Wy�rKa�v�ba�^�%R01u MAPS �^�z�v��f�X�%R�x�vMR�v��f��rKa
CleanStatePendingFullScan
PendingRebootPendingManualStepsPendingOfflineScanCriticalFailure"u�THr,g (;N���!k���D}�^��O�)
g�RHr,g (;N���!k���D}�^��O�)�S��܊�R��yr�_�xHr,g (;N���!k���D}�^��O�)-�S��܊�R��yr�_�x�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y"�S��܊�R��
N!k�f�e�v,g0WBf��0�Y�gdkBf���_*g�f�eN��dkl\'`\o�:yzz<P2��kyr�_�xHr,g (;N���!k���D}�^��O�)PA*2��kyr�_�x�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y"2��k
N!k�f�e�v,g0WBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<PNRI yr�_�xHr,g (;N���!k���D}�^��O�),NRI yr�_�x�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y$NRI 
N!k�f�e�v,g0WBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P"
N!k�[te�c�c���Y�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P"
N!k�[te�c�cP}_g�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P+
N!k�[te�c�c�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y
N!k�c�c�O�n!q�l��X�O(u��|q}sSBfIOAVsSBf�c�c�eTR	�iQ�PA#�eQ#��Q"
N!k�_��c�c���Y�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P"
N!k�_��c�cP}_g�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P,
N!k�_��c�c�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y0AM _�dHr,g (;N���!k���D}�^��O�)
AM _�d�]/f&T_U(uc�[��f�/f&T���v����f�
N�v�jHh�z_;m�R�c�c@b	gN	��v�jHh�D��Nc�[/f&T��_U(uL��p�v��c�[/f&T��_U(u2��k�Ow�c�[/f&T��_U(u�S��܊�R���Ow�c�[��f�/f&T�p[��d_jhV
c�Q��f�/f&T�]��_U�z9e2�w�c�[/f&T��_U(usSBf�Ow�NRI _�dHr,g (;N���!k���D}�^��O�)NRI _�d/f&T�]_U(uP}�i�c�Hr,g/UNuP,nX�%R�xZ��v
T1z�V͑'`X�%R�x - R	�NO-NؚSevereCategory ID - EnumerationINVALIDADWARESPYWAREPASSWORDSTEALERTROJANDOWNLOADERWORMPABACKDOORREMOTEACCESSTROJANTROJANEMAILFLOODER	KEYLOGGERDIALERMONITORINGSOFTWAREBROWSERMODIFIERCOOKIE
BROWSERPLUGIN
AOLEXPLOITNUKERSECURITYDISABLERJOKEPROGRAMHOSTILEACTIVEXCONTROLSOFTWAREBUNDLERPASTEALTHNOTIFIERSETTINGSMODIFIERTOOLBARREMOTECONTROLSOFTWARE	TROJANFTPPOTENTIALUNWANTEDSOFTWARE
ICQEXPLOITTROJANTELNETFILESHARINGPROGRAMMALWARE_CREATION_TOOLREMOTE_CONTROL_SOFTWARETOOLTROJAN_DENIALOFSERVICETROJAN_DROPPERTROJAN_MASSMAILERTROJAN_MONITORINGSOFTWAREPATROJAN_PROXYSERVERVIRUS�]�w
NfSPPL��p1_ޞ�SGR
^��WX�%R�x - R	��]�w�`aL��p�]�w!q�`aNRIThreat Rollup StatusThreatCleanRebootRequiredPAOfflineScanRequiredManualStepsRequiredFullScanRequiredReinfectionLoop�]�WL�
�SZ�q_���vnj�nn�U
c�[Z�/f&T�f�}�WL�	c�[Z�/f&T\O(u-Ndk�UN��vh�:y Microsoft �S�`az_�x
g�Ra�g�rKadk^�%Rh�:y�]��X�KNZ��v^�%R�v�/UNZ�X�%R�x	�vܕ�vU�tz�^
T1z"The user who requested remediation&Detection Source Type ID - EnumerationELAMLocalAttestationPARemoteAttestation
�SuP,nq_���vnj�nn�U
��!kuP,n0RZ��vBf��Z��rKa���f�vgяBf��܈Qe�vBf��0�WL��rKaX�%R�x - R	�BlockedAllowedck(W�WL�NotExecutingZ��rKaX�%R�x - R	��]uP,n�]nd�QuarantinedRemovedCleanFailedPAQuarantineFailedRemoveFailedAllowFailed�]>e�h
BlockedFailedZ��rKa/����x	nd��R\O - R	�nd����RemoveAllowUserDefinedNoAction\��
c�Qnd��R\O/f&Tb�R�_��WL�M�Y�R\O�N�[b܈Qe - R	�PANoneFullScanAndRebootRequiredFullScanAndManualStepsRequiredRebootAndManualStepsRequired'FullScanAndRebootAndManualStepsRequiredFullScanAndOfflineScanRequiredRebootAndOfflineScanRequired'FullScanAndRebootAndOfflineScanRequired!ManualStepsAndOfflineScanRequired,FullScanAndManualStepsAndOfflineScanRequired*RebootAndManualStepsAndOfflineScanRequired5FullScanAndRebootAndManualStepsAndOfflineScanRequireddk^�%Rh�:y�vMRs�0}�vZ��rKa%AQ1��|q}�{t�Tc�[/f&T�ar�ܕ�� Server SKU �v0��R�cd�
0�R��0AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�Q_�v�c�c0AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QoR�j
T�v�c�c0PAAQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QU�tz�^�v�c�c0#c�Q��v�a�OYu(W [���] nj�e>Y�v)Yxe��}N�dkBf��KN�_sSg�N�N�yd�0sSBf�c�c�eT - R	�c�Q��(Wfg~^�WL��c�[�v�[te�c�c�N�[b܈Qe0�k)Yfg�efgNfg�Nfg	Nfg�Vfg�NfgmQ8l
Nc�Q��(W�N��Bf���WL��c�[�v�[te�c�c�N�[b܈Qe0-��[���M�Y�R\OKNuP,n�v>�Bf0%uP,n�_0�V͑1YWe
0�rKa���f�p0vQ�N�R\O
0b0�]nd�
0�rKa�vBf�� (R�)0PAuP,n�_01YWe
0�rKa���f�p0�]nd�
0�rKa�vBf�� (R�)0gc�[�c�cg���v CPU O(u�s~vR�k
NP�0dk�SGR-��[�S���`c�[�c�cg��AQ1��v CPU O(u�s~vR�k
NP�0dk-��[�v	gHe<P/f�Ntexe 5 0R 100 �Nh��v~vR�k0<P 0 h�:y
Nݑ
\ CPU O(u�s2�L��{AmU�t0Z-��[Bf�Microsoft Defender 2��kߎԚg(W�WL��c�cMR�j�g�e�v=|�z0�Y�g(W�c�c���YMR~b0R�e�v=|�z�\N	�&N�[݈0�Y�g~b
N0R�NUO�e�v=|�z�GR\g9h�d�s	g�v=|�z���Y�c�c0k��_U�_�c�cwkz��nj�e>Y�yd���v�v�R��0dk-��[�S�[���v�a�OYu(W�c�cwkz��nj�e>Y-N�v)Yxe��}N�dkBf��KN�_sSg\��v8lEN�yd�0<P�Nh���v���OYu(Wr�nj�e>Y-N�v)Yxe0�-��[�p���\g8l`��OYu��v��
Ng��R\��v�yd�0�S	gvu�|q}U��e��n�rKaBf�Mb�WL��c�[�v�c�c0c�[�c�[�v�c�c@bO(u�v�c�c^��W0�_��c�c�[te�c�c
c�[fg~^�WL��c�[�v�c�c0c�[N)Yvu-N���WL��]�c�[KN�_��c�c�vBf��0
c�[�WL��c�[KN�c�c�vBf��0(W��!k�[݈�_-��[�vBf��gQ�N�_-Nbk
g�Rw��Y�v@b	g�f�e0K���[ CheckForSignatureBeforeRunningScan0�Y�gyr�_�x(WdkBf��gQ�)R�f�e�GR-Nbk
g�Rw��Y�v@b	g�f�e0Bf���NR��p�UMO0��[�(u�eN	��[hQ'`�`1X�f�e�v�jHhqQ(u0dk-��[�S���`c�[ UNC �jHhqQ(u�O�n��NX[>eN	��v�[hQ'`�`1X�f�e0\�Nc�[�v��^#��}0R�f�e�O�n0�`�_�O(u�N�{�}R���vW[2Nb__c�[dk-��[�v<P��OR	��[hQ'`�`1X�f�e�O�n0�O�Y: {\unc1 | \unc2 }0dkn�U�-�/fzz�v0'�-��[�p True�!q֊/f&T	g_�d�AM 
g�R��
Ng(W_U�RBfw��Y�[hQ�`1X�f�e0��[�N	��[hQ'`�`1X�f�e�v�O�n��^0dk-��[�S���`c�[#��}0R
NT�[hQ'`�`1X�f�e�O�nBf��O(u�v��^0�`�_�O(u�N�{�}R���vW[2Nb__c�[dk-��[�v<P��O�O�^R	��[hQ'`�`1X�f�e�O�n0�S���v<P/f: 'InternalDefinitionUpdateServer'  'MicrosoftUpdateServer'  'MMPC'  'FileShares' &c�Q��(Wfg~^�f�e�[hQ�`1X0�-��[�p�� (0x0)�h�:y���k)Y�f�e�[hQ�`1X0-c�[�a�WL��[hQ�`1X�f�e�j�g�vBf��09h�d�-��g(W�WL��c�[�v�c�cKNMR�j�g/f&T	g�[hQ�`1X�f�e0M�[��_���܈yr�_�x�v)Yxe0-dM� SignatureUpdateLastChecked O(u00 = 
N��܈; 1 = 1 )Y; 2 = 2 )Y��Odk^��c04Bf��<P/f�N�f�e�j�g���� (\Bf) h�:y0	gHe�v<P�N�e 1 (�k\BfN!k) 0R 24 (�k)YN!k) KN��0�ReQ Microsoft MAPS0DisabledBasicAdvancedTa#j,g�c�N0AlwaysPromptSendSafeSamples	NeverSendSendAllSamples\P(u���y
k!j_0f�P-��[�S���`_U(ub\P(u��_j�c�[�c�c�T�[hQ�`1X�f�e�v���YBf��0�P-��[�S(u�ORce�c�c
\nj�n�vq_��0�O�Y��`�S�N(WqQ(u;N_j�vY萢[Ԛ[��d_jhV-NO(u��-��[��N�MQY萢[Ԛ[��d_jhVTBf�WL�'YϑX[�S�x�x�v�d\O0\P(uL��p�v��0PA	\P(ueQ�O�2��|q}0\P(u IOAV �Ow�0\P(usSBf�v��0\P(uc�N�x�c�c0\P(u\X[�c�c0>\P(u��܈�[te�c�c0��܈�c�c/fN.z�V�p/�N��]�c�[�v�[g�c�c��WL��v�c�c0/�N��]�c�[�v�c�c�v�S�V�8^/f��f�(W�c�[�vBf��&N*g��_j0>\P(u��܈�_��c�c0��܈�c�c/fN.z�V�p/�N��]�c�[�v�[g�c�c��WL��v�c�c0/�N��]�c�[�v�c�c�v�S�V�8^/f��f�(W�c�[�vBf��&N*g��_j0	\P(u��P[���N�c�c0\P(u�b�S_�x�x_j�c�c0\P(u���Sޞ0\P(u(W#��}�v�}�x�x_j
N�WL��[te�c�c0	\P(u�}jHh�c�c0_U(u UI ���[!j_0buP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�vZ�X�%R�x0ThreatIDDefaultAction_Actions -N�v�R\O��^�_�� ThreatIDDefaultAction_Ids -N�vX�%R�x��^�vTKuP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�v�-��R\O0��N�R\O�v��^�_�� ThreatIDDefaultAction_Ids l\'`-Nc�[�v
\�aX�%R�x��^�vT0

NfZ��v�-��R\O0
NO�^�V͑'`Z��v�-��R\O0
-N�^�V͑'`Z��v�-��R\O0
ؚ�^�V͑'`Z��v�-��R\O0+Default action for severe severity threats.>Specify PUA(Potentially Unwanted Application) protection mode.�]_U(u	AuditMode\P(u,{N!kw��Bf\���v�R��0!Configure cloud protection level.DefaultHigh+Zero tolerance-��[�^w���z�j�g0	gHe<P 0-50 �y0FConfigure Microsoft Defender Exploit Guard network protection feature.
Audit Mode-��[ [�S�cnj�e>YX[�S
k] �R��0BlockDiskModificationOnlyAuditDiskModificationOnly?Specify the exclusions for Attack Surface Reduction Rules(ASR).�Specify Attack Surface Reduction Rule(ASR) Ids. The rule Ids need to be in the same order as their respective actions specified in the AttackSurfaceReductionRules_Actions property.�Default actions for Attack Surface Reduction Rule(ASR). The actions need to be in the same order as their respective rule Ids specified in the AttackSurfaceReductionRules_Ids property.AAdd allowed applications to the Controlled folder access feature.>Add protected folders to the Controlled folder access feature.GDefines a file share for security intelligence in virtual environments.HConfigure whether low cpu priority should be used during scheduled scan.2Enables or disables file hash computation feature.��[�N	��[hQ'`�`1X�f�e�v�O�n��^0dk-��[�S���`�[�
NT�[hQ'`�`1X�f�e�O�n�a#�a}�v��^0�a\dk-��[<P\O�p�N�{S�R���vW[&{2N8�eQ�	c��^�g	��[hQ�`1X�f�e�O�n0�S���vxe<P�p�0InternalDefinitionUpdateServer
00MicrosoftUpdateServer
00MMPC
00FileShares
0  c�Q��(Wfg~^�f�e�[hQ�`1X0�-��[�p���h�:y���k)Y�f�e�[hQ�`1X0J�[��d�O��܈=|�z�v)Yxe0-dM� SignatureUpdateLastChecked O(u00 = 
N��܈�1 = 1 )Y�2 = 2 )Y��Odk^��c0\P(u���y
k!j_0-dk Cmdlet �-�g\BlO(u��x��0�c�[ -Force�GR
NgTO(u�\Bl�-��x��0c�[�S;e�db�.~\��GR�v�cd���v0�[�[��d�t�X-N�O�[hQ�`1X�f�eO(u�v�jHhqQ(u@S01.0Microsoft Defender 2��kߎԚOP}Y-��[^�%RMicrosoft Defender 2��kߎԚ�c�c^�%RMicrosoft Defender 2��kߎԚ=|�z^�%R��w^�%R0ScanStateNotificationsThreatStateNotificationsSignatureStateNotificationsComputerStateNotificationss�0}�c�c��w0
ErrorOccurred
ScanCompleteds�0}Z���w0SuccessfulRemediationNonCriticalFailures�0}=|�z��w0SignaturesOutOfDates�0}��f���w0ScansOutOfDateComponentsChangedStateRecovered"uu WMI �N�N�v�eg�TBf��VvQ�Nnj�e0�vMR/UN�vO(u�`�l/fvu CategoryDiscriminant I{�e ThreatStateNotificationsthen Bf�dk<P\S+T ThreatIDMicrosoft Defender 2��kߎԚ�N�Nc:y^�%R Microsoft Defender 2��kߎԚ WDO �c�c^�%RMicrosoft Defender 2��kߎԚ�_�^�%RPA%1!s! ck(W�c�c�`�v݈n��x��S�v�c�c^��W��[���S�����N�NBf��0�c�c�]�)R�[b0Vf��c�c�`�v݈nBf|vu/���0���c�c�[te�c�c�_��c�c%1!s! %2!s!
ck(W�f�e�u�k�S��܊ߎԚ�[�!%1!s! g��R�f�e�`�v�u�k�S��܊ߎԚ�[���NTS�R�Ow��`�v݈n0�u�k�S��܊ߎԚ�[��f�e�]�)R�[b0�u�k�S��܊ߎԚ�[��f�e�]�[bFO	g/���0	�u�k�S��܊ߎԚ�[��d\O1YWe�|vuNR/���: 0x%1!x!�WL����c�cBf��_���	g ScanPath �Sxe0dk݈n�]�}(W�WL��c�c0dk݈n�]�}(W�WL��u�k�S��܊ߎԚ�[��f�e0ck(Wnd���uP,n�p�S��	g�[�v��v0�`�v݈n�vMR�l	g�NUOuP,n0R�v��v�Snd�0Vf�nd���uP,n�p�S��	g�[�v��vBf|vu/���0F�_��p�kP ThreatIDDefaultAction_Ids �Sxec�[ AThreatIDDefaultAction_Actions <P0!q�l�S�_Z�X�%R�x�v�-��R\O0/���: 0x%1!x!)�d\O1YWe�|vuNR/���: 0x%1!x!0�d\O: %2!s!0�vj: %3!s!0�`�l	g�� Y�v
kP��S�WL���Bl�v�d\O0Vf�(W�`�v݈n
N�WL� WDO �c�cBf|vu/���0PA�����D%2 WMI �c�O��WL�PԚ�d�S�e�l-N|vu/��� %10%0

<%2 WMI �c�O�\�Ka�e�l-N|vu/��� %10%0

P%2 WMI �c�O� FireEvent �e�l-N|vu/��� %10%0

|Vf��_@b	g\O(u-N��f��]\O���k{v� %2 WMI �c�O���wBf|vu/��� %10�Sg6e0R�O��vMR�]\O���k�v��w0%0

PVf��p %2 WMI �c�O��^�z�N�N�v���WL��}Bf|vu/��� %10%0

XVf�{v� %2 WMI �c�O��N�S�_�v���S�`az_�x��wBf|vu/��� %10%0

�4VS_VERSION_INFO��@s@s?@StringFileInfo040404B0LCompanyNameMicrosoft Corporationh FileDescriptionProtection Management WMIv2 �c�O�n'FileVersion4.18.1907.16384 (WinBuild.160101.0800)JInternalNameProtectionManagement�.LegalCopyright� Microsoft Corporation. All rights reserved.bOriginalFilenameProtectionManagement.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion4.18.1907.16384DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING