MZ����@���	�!�
L�!This program cannot be run in DOS mode.

$�;=ߍZS��ZS��ZS�Ӭ��ZS��Q��ZS�Rich�ZS�PEd����i�" ,��
��`
 4��(8.rdata�@@.rsrc� �@@���i
lPP���i$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg �.rsrc$01� H�.rsrc$02 z,�̣'L�J��FE�]ϟ�2l�����i
��(�@�X�

p�

��

��
�
�
�� ���!��p���MUI���
�)~�+p{
�4ib�JK��W�1\�|n�6���MUIru-RU g�j�xPP 
�
�x e�e�� ����`!\�i��Dk�n�8m~���z����$�����l�����`������������p���������������������x�<
=B828@CA=0O ?@>3@0<<0%0

<
=B8H?8>=A:0O ?@>3@0<<0%0

@
=B82@54>=>A=0O ?@>3@0<<0%0


>;=>5%0

$
 07=>AB=>5%0

,
>;=0O ?@>25@:0%0

0
KAB@0O ?@>25@:0%0

<
0AB@08205<0O ?@>25@:0%0


#40;8BL%0

8
><5AB8BL 2 :0@0=B8=%0

 
G8AB8BL%0

 
 07@5H8BL%0

$
58725AB=>%0

,
@8>AB0=>2;5=>%0

 
 07@5H5=>%0

(
>;L7>20B5;L%0

 
07=0G5=>%0

p
0?:0 4;O >1=>2;5=8O A;C61K 0=0;870 157>?0A=>AB8%0

D
0I8B0 2 @50;L=>< 2@5<5=8:%0

4
03@C7:8 8 2;>65=8O%0


!8AB5<0%0

 
-2@8AB8:0%0

$
>=:@5B=K9%0

(
#=825@A0;L=K9%0


"5:CI89%0

 
@E82=K9%0

(
> C<>;G0=8N%0

`
=B828@CA=0O ?@>3@0<<0 Microsoft Defender%0

\
Microsoft Forefront Endpoint Protection%0

p
2B>=><=>5 A@54AB2> ?@>25@:8 A8AB5<K (09:@>A>DB)%0


!1>9%0

 
028A0=85%0

$
5?@8<5=8<>%0

\
03@C7:8 IE 8 2;>65=8O Outlook Express%0

$
@8 4>ABC?5%0

@
01;N45=85 70 ?>2545=85<%0

T
@0925@-D8;LB@ CA?5H=> ?5@570?CI5=.%0

\
@0925@-D8;LB@ 1K; =5>6840==> 2K3@C65=.%0



@0925@-D8;LB@ ?@>?CAB8; ?@>25@:C >1J5:B>2 8 A59G0A =0E>48BAO 2 @568<5 >BA5820=8O. >7<>6=>, MB> 2K720=> =5E20B:>9 @5AC@A>2.%0

�
@0925@-D8;LB@ ?5@570?CAB8; ?@>25@:C >1J5:B>2 8 2KH5; 87 @568<0 >BA5820=8O.%0



0I8B0 2 @50;L=>< 2@5<5=8 ?5@5AB0;0 @01>B0BL ?> =58725AB=>9 ?@8G8=5. 5@570?CAB8B5 A;C61C, GB>1K 2>AAB0=>28BL 55 @01>BC.%0

�
 01>B0 70I8BK 2 @50;L=>< 2@5<5=8 2>AAB0=>2;5=0 ?>A;5 =58725AB=>9 >H81:8.  5:><5=4C5BAO 2K?>;=8BL 1KAB@CN ?@>25@:C.%0

l

;O @01>BK 4@0925@0-D8;LB@0 B@51C5BAO 0:BC0;L=0O ?>4A8AB5<0. 'B>1K 2:;NG8BL 70I8BC 2 @50;L=>< 2@5<5=8, =5>1E>48<> CAB0=>28BL ?>A;54=85 >1=>2;5=8O A;C61K 0=0;870 157>?0A=>AB8.%0

,
>4>7@8B5;L=K9%0

$
58725AB=>%0

4
>:0;L=K9 :><?LNB5@%0

(
!5B520O ?0?:0%0

 
=B5@=5B%0

$
K?>;=5=85%0

�
=CB@5==89 A5@25@ >1=>2;5=89 4;O A;C61K 0=0;870 157>?0A=>AB8%0

8
1I89 D09;>2K9 @5AC@A%0

t
&5=B@ 09:@>A>DB ?> 70I8B5 >B 2@54>=>A=KE ?@>3@0<<%0


>8A:%0

$
!:0G820=85%0

 
#AB0=>2:0%0


87:89%0


!@54=89%0


KA>:89%0

X

!;C610 0=0;870 70I8BK >B 2@54>=>A=KE ?@>3@0<< ?5@5AB0;0 @01>B0BL ?> =58725AB=>9 ?@8G8=5.  =5:>B>@KE A;CG0OE ?@>1;5<0 <>65B 1KBL CAB@0=5=0 ?CB5< ?5@570?CA:0 A;C61K.%0

T
!5@25@ &5=B@0 >1=>2;5=8O 09:@>A>DB%0

8
Microsoft Antimalware%0

8
Microsoft Antimalware%0

 
FastPath%0

\
1=>2;5=85 A;C61K 0=0;870 157>?0A=>AB8%0

x
#254><;5=85 >1 >B:;NG5=88 A;C61K 0=0;870 157>?0A=>AB8%0

$
5@A8O VDM%0

(
5B:0 2@5<5=8%0

,
5B >3@0=8G5=89%0


@CG=CN%0

(
2B><0B8G5A:8%0

(
;8B5;L=>ABL%0


5B%0

L
Information Protection Control%0

$
58725AB=>%0

$
1=0@C65=>%0


G8I5=>%0

4
><5I5=> 2 :0@0=B8=%0


#40;5=>%0

 
 07@5H5=>%0

(
!1>9 >G8AB:8%0

,
!1>9 :0@0=B8=0%0

(
!1>9 C40;5=8O%0

,
!1>9 @07@5H5=8O%0

$
58725AB=>%0

8
!8AB5<0 ?@>25@:8 A5B8%0

$
5?@8<5=8<>%0

0
AE>4OI89 B@0D8:%0

,
E>4OI89 B@0D8:%0

$
;>:8@>20BL%0

X
@>25@:0 @0AH8@5=8O Internet Explorer%0

0

 A8AB5<5 =5 CAB0=>2;5=K >1=>2;5=8O, =5>1E>48<K5 4;O 70?CA:0 A8AB5<K ?@>25@:8 A5B8. #AB0=>28B5 =5>1E>48<K5 >1=>2;5=8O 8 ?5@5703@C78B5 CAB@>9AB2>.%0

\
 0==89 70?CA: 0=B82@54>=>A=>9 ?@>3@0<<K%0

8
@>25@:0 6C@=0;0 TCG%0

0
#40;5==K9 A5@25@%0

�
!8AB5<5 ?@>25@:8 A5B8 =5 C40;>AL CA?5H=> 70?CAB8BLAO 87-70 >H81:8.%0


AMSI%0

l
>AB02I8: A;C61K :>=B@>;O CG5B=KE 70?8A59 AMSI%0

X
Microsoft Defender 4;O :>=5G=>9 B>G:8%0

p
1I0O :>@=520O ?0?:0 A;C61K 0=0;870 157>?0A=>AB8%0


:;NG5=%0

 
B:;NG5=%0

(
01;>:8@>20=>%0

 
@>?CI5=>%0

,
@5<O >6840=8O%0

$
>72@0I5=>%0


��:�>u
9%0

8
�J1Y
c
7
 L^ �%

 
>
V
�c
%0

0
Z
5S���
 U%
�g
���D
%0

<
� � 
Q
 K
�
B-
1I
 Oo
 
�HF
%0

�
\

%
��F>
.!
 [
A�H
 ��U U\+
@��� 2T�
�_
7 B%
M @
�a
� _
s


��_
]
�
�<
 a


�� H�_
 I�e
%
�I
 e
%

 @
�Ue
 %1!u! �
C[
%0

P
Z
	
�K
 u
�a
 a
����Q
 g
> _
��5 L��g
Q�C%0

 
�� ��m�H

%0

 
Z

[

k
<
��%0

 


g
�= �@%0

4


O
_
]
��
 A��A'
 �@%0

(
"O
e
 U@M
)
�
�T�%0

H
5 C40;>AL ?>;CG8BL 7=0G5=85%0

@
0?;0=8@>20=> 8A?@02;5=85%0

@
0?;0=8@>20==K9 8=B5@20;%0

<
0?;0=8@>20=> 5654=52=>%0

H
0?;0=8@>20==>5 >1A;C6820=85%0


H81:0

(
@54C?@5645=85


!2545=8O

T
Microsoft-Windows�  0I8B=8: Windows

�
!>AB>O=85 0=B828@CA=>9 ?@>3@0<<K Microsoft Defender >1=>2;5=> 4> %1.

d
0G0B0 ?@>25@:0 %1.%n %t45=B8D8:0B>@ ?@>25@:8:%b%3%n %t"8? ?@>25@:8:%b%5%n %t0@0<5B@K ?@>25@:8:%b%7%n %t 5AC@AK ?@>25@:8:%b%11%n  %t>;L7>20B5;L:%b%8\%9%n %t"@8335@ ?@>25@:8:%b%13%n %t@>25@OBL B>;L:> 2 =50:B82=>< A>AB>O=88:%b%14%n %t87:89 ?@8>@8B5B & 4;O ?@>25@>::%b%15%n %t@8>@8B5B ?>B>:0:%b%16

@

%1 7025@H8;0 ?@>25@:C.%n %t ?@>25@:8:%b%3%n %t"8? ?@>25@:8:%b%5%n %t0@0<5B@K ?@>25@:8:%b%7%n %t>;L7>20B5;L:%b%8\%9%n %t0B@0G5=> 2@5<5=8:%b%11:%12:%13

,

%1 [



� %
�_
 L
�� ]
g
���T
 J
�
�Y
� 

�m�!���Q
9.%; %�\
A�I
 ��:%J%3%K
 %c
Z


F
 "��7:%L%5%; %g
\
	
0K
  ���mT�
3U:%2%7%�  %��UQY
:%L%8\%9%8 %�`
��� �
�
[
�D
:%2%12



@>25@:0, 2K?>;=O5<0O %1, ?@8>AB0=>2;5=0.%n %t ?@>25@:8:%b%3%n %t"8? ?@>25@:8:%b%5%n %t0@0<5B@K ?@>25@:8:%b%7%n %t>;L7>20B5;L:%b%8\%9



@>25@:0, 2K?>;=O5<0O %1, 2>7>1=>2;5=0.%n %t ?@>25@:8:%b%3%n %t"8? ?@>25@:8:%b%5%n %t0@0<5B@K ?@>25@:8:%b%7%n %t>;L7>20B5;L:%b%8\%9

�

@8 ?@>25@:5, 2K?>;=O5<>9 %1, ?@>87>H;0 >H81:0, GB> ?@825;> : 7025@H5=8N ?@>25@:8.%n %t ?@>25@:8:%b%3%n %t"8? ?@>25@:8:%b%5%n %t0@0<5B@K ?@>25@:8:%b%7%n %t>;L7>20B5;L:%b%8\%9%n %t>4 >H81:8:%b%11%n %t?8A0=85 >H81:8:%b%12

�
@>3@0<<0 %1 >1=0@C68;0 2@54>=>A=K5 8;8 4@C385 ?>B5=F80;L=> =565;0B5;L=K5 ?@>3@0<<K.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%15%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t1=0@C65==K9 ?CBL:%b%16%n %t"8? >1=0@C65=8O:%b%22%n %tAB>G=8: >1=0@C65=8O:%b%5%n %t!>AB>O=85:%b%20%n %t>;L7>20B5;L:%b%8\%9%n %t0720=85 ?@>F5AA0:%b%7%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

|
 5H5=85 %1 >1=0@C68;> 2@54>=>A=K5 8;8 ?>B5=F80;L=> =565;0B5;L=K5 ?@>3@0<<K A ?><>ILN <5E0=87<0 >1=0@C65=8O C3@>7 Defender 8 ?@8<5=8;> 459AB285 ?> CAB@0=5=8N, 7040==>5 2 ?0@0<5B@0E 157>?0A=>AB8.%n >?>;=8B5;L=K5 A2545=8O A<. =865:%n%15%n %t>;L7>20B5;L:%b%8\%9%n %t<O:%b%11%n %t:%b%12%n %tt!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t59AB285:%b%20%n %t!>AB>O=85:%b%7%n %t5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

�
@8 2K?>;=5=88 ?@>3@0<<>9 %1 459AB28O ?> 70I8B5 >B 2@54>=>A=KE 8;8 4@C38E ?>B5=F80;L=> =565;0B5;L=KE ?@>3@0<< 2>7=8:;0 >H81:0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%15%n %t>;L7>20B5;L:%b%8\%9%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %tCBL:%b%16%n %t59AB285:%b%20%n %t>4 >H81:8:%b%21%n %t?8A0=85 >H81:8:%b%22%n %t!>AB>O=85:%b%7%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

0
@>3@0<<0 %1 2>AAB0=>28;0 M;5<5=B 87 :0@0=B8=0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%15%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t>;L7>20B5;L:%b%8\%9%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

�
@8 2>AAB0=>2;5=88 ?@>3@0<<>9 %1 M;5<5=B0 87 :0@0=B8=0 2>7=8:;0 >H81:0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%15%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t>;L7>20B5;L:%b%8\%9%n %t>4 >H81:8:%b%3%n %t?8A0=85 >H81:8:%b%4%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

$
@>3@0<<0 %1 C40;8;0 M;5<5=B 87 :0@0=B8=0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%15%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t>;L7>20B5;L:%b%8\%9%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

�
@8 C40;5=88 ?@>3@0<<>9 %1 M;5<5=B0 87 :0@0=B8=0 2>7=8:;0 >H81:0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%15%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t>;L7>20B5;L:%b%8\%9%n %t>4 >H81:8:%b%3%n %t?8A0=85 >H81:8:%b%4%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28

�
%1 C40;8;0 6C@=0; 2@54>=>A=>9 8;8 4@C3>9 ?>B5=F80;L=> =565;0B5;L=>9 ?@>3@0<<K.%n %t@5<O:%b%3%n %t>;L7>20B5;L:%b%8\%9%n

�

@8 ?>?KB:5 %1 C40;8BL 6C@=0; 2@54>=>A=>9 8;8 4@C3>9 ?>B5=F80;L=> =565;0B5;L=>9 ?@>3@0<<K ?@>87>H;0 >H81:0.%n %t@5<O:%b%3%n %t>;L7>20B5;L:%b%8\%9%n %t>4 >H81:8:%b%4%n %t?8A0=85 >H81:8:%b%5

�
@>3@0<<0 %1 >1=0@C68;0 ?>4>7@8B5;L=>5 ?>2545=85.%n %t<O:%b%11%n %t:%b%12%n %t!5@L57=>ABL:%b%25%n %t0B53>@8O:%b%26%n %t1=0@C65==K9 ?CBL:%b%16%n %t0G0;> >1=0@C65=8O:%b%18%n %t"8? >1=0@C65=8O:%b%22%n %tAB>G=8: >1=0@C65=8O:%b%5%n %t!>AB>O=85:%b%20%n %t>;L7>20B5;L:%b%8\%9%n %t0720=85 ?@>F5AA0:%b%7%n %t A;C61K 0=0;870 157>?0A=>AB8:%b%30%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%27%n %t5@A8O ?>4A8AB5<K:%b%28%n %t5B:0 B>G=>AB8: %b%32%n %t<O F5;52>3> D09;0: %b%36%n

t
@>3@0<<0 %1 >1=0@C68;0 2@54>=>A=K5 8;8 4@C385 ?>B5=F80;L=> =565;0B5;L=K5 ?@>3@0<<K.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%13%n %t<O:%b%8%n %t:%b%7%n %t!5@L57=>ABL:%b%10%n %t0B53>@8O:%b%12%n %tCBL:%b%22%n %t0G0;> >1=0@C65=8O:%b%24%n %t"8? >1=0@C65=8O:%b%28%n %tAB>G=8: >1=0@C65=8O:%b%18%n %t>;L7>20B5;L:%b%20%n %t0720=85 ?@>F5AA0:%b%19%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%41%n %t5@A8O ?>4A8AB5<K:%b%42

�
 5H5=85 %1 >1=0@C68;> 2@54>=>A=K5 8;8 ?>B5=F80;L=> =565;0B5;L=K5 ?@>3@0<<K A ?><>ILN <5E0=87<0 >1=0@C65=8O C3@>7 Defender 8 ?@8<5=8;> 459AB285 ?> CAB@0=5=8N, 7040==>5 2 ?0@0<5B@0E 157>?0A=>AB8.%n >?>;=8B5;L=K5 A2545=8O A<. =865:%n%13%n %t<O:%b%8%n %t:%b%7%n %t!5@L57=>ABL:%b%10%n %t0B53>@8O:%b%12%n %tCBL:%b%22%n %t0G0;> >1=0@C65=8O:%b%24%n %t"8? >1=0@C65=8O:%b%28%n %tAB>G=8: >1=0@C65=8O:%b%18%n %t>;L7>20B5;L:%b%39%n %t<O ?@>F5AA0:%b%19%n %t59AB285:%b%31%n %t!>AB>O=85 459AB28O: %b%38%n %t>4 >H81:8:%b%33%n %t?8A0=85 >H81:8:%b%34%n %t5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%41%n %t5@A8O ?>4A8AB5<K:%b%42

�
@8 2K?>;=5=88 ?@>3@0<<>9 %1 459AB28O ?> 70I8B5 >B 2@54>=>A=KE 8;8 4@C38E ?>B5=F80;L=> =565;0B5;L=KE ?@>3@0<< 2>7=8:;0 =5:@8B8G=0O >H81:0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%13%n %t<O:%b%8%n %t:%b%7%n %t!5@L57=>ABL:%b%10%n %t0B53>@8O:%b%12%n %tCBL:%b%22%n %t0G0;> >1=0@C65=8O:%b%24%n %t"8? >1=0@C65=8O:%b%28%n %tAB>G=8: >1=0@C65=8O:%b%18%n %t>;L7>20B5;L:%b%39%n %t0720=85 ?@>F5AA0:%b%19%n %t59AB285:%b%31%n %t!>AB>O=85 459AB28O: %b%38%n %t>4 >H81:8:%b%33%n %t?8A0=85 >H81:8:%b%34%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%41%n %t5@A8O ?>4A8AB5<K:%b%42

�
@8 2K?>;=5=88 ?@>3@0<<>9 %1 459AB28O ?> 70I8B5 >B 2@54>=>A=KE 8;8 4@C38E ?>B5=F80;L=> =565;0B5;L=KE ?@>3@0<< 2>7=8:;0 :@8B8G5A:0O >H81:0.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%13%n %t<O:%b%8%n %t:%b%7%n %t!5@L57=>ABL:%b%10%n %t0B53>@8O:%b%12%n %tCBL:%b%22%n %t0G0;> >1=0@C65=8O:%b%24%n %t"8? >1=0@C65=8O:%b%28%n %tAB>G=8: >1=0@C65=8O:%b%18%n %t>;L7>20B5;L:%b%39%n %t0720=85 ?@>F5AA0:%b%19%n %t59AB285:%b%31%n %t!>AB>O=85 459AB28O: %b%38%n %t>4 >H81:8:%b%33%n %t?8A0=85 >H81:8:%b%34%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%41%n %t5@A8O ?>4A8AB5<K:%b%42

�
%1 2K2545=K EMH8 4;O @5AC@A0 C3@>7.%n %t"5:CI0O 25@A8O ?;0BD>@<K:%b%2%n %tCBL : @5AC@AC C3@>7:%b%4%n %t%MH8:%b%5


!;C610 Exploit Guard 2 Microsoft Defender 701;>:8@>20;0 >?5@0F8N, :>B>@CN 70?@5B8; "-04<8=8AB@0B>@.%n >?>;=8B5;L=K5 A2545=8O <>6=> ?>;CG8BL C "-04<8=8AB@0B>@0.%n %t:%b%4%n %t@5<O >1=0@C65=8O:%b%5%n %t>;L7>20B5;L:%b%6%n %tCBL:%b%7%n %t0720=85 ?@>F5AA0:%b%8%n %t><0=4=0O AB@>:0 :>=5G=>3> >1J5:B0:%b%12%n %t><0=4=0O AB@>:0 8AE>4=>3> >1J5:B0:%b%13%n %t 0AA<0B@8205<K9 D09;:%b%14%n %t$;06:8 =0A;54>20=8O:%b%15%n %t5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%9%n %t5@A8O O4@0:%b%10%n %t5@A8O ?@>4C:B0:%b%2%n

�
!;C610 Exploit Guard 2 Microsoft Defender ?@>25;0 0C48B >?5@0F88, :>B>@CN 70?@5B8; "-04<8=8AB@0B>@.%n >?>;=8B5;L=K5 A2545=8O <>6=> ?>;CG8BL C "-04<8=8AB@0B>@0.%n%t:%b%4%n%t@5<O >1=0@C65=8O:%b%5%n%t>;L7>20B5;L:%b%6%n%tCBL:%b%7%n%t<O ?@>F5AA0:%b%8%n%t><0=4=0O AB@>:0 :>=5G=>3> >1J5:B0:%b%12%n %t><0=4=0O AB@>:0 8AE>4=>3> >1J5:B0:%b%13%n %t 0AA<0B@8205<K9 D09;:%b%14%n %t$;06:8 =0A;54>20=8O:%b%15%n %t5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%9%n %t5@A8O O4@0:%b%10%n %t5@A8O ?@>4C:B0:%b%2%n


$C=:F8O :>=B@>;8@C5<>3> 4>ABC?0 : D09;0< 70?@5B8;0 >1J5:BC %8 87<5=OBL %7.%n %t@5<O >1=0@C65=8O:%b%5%n %t>;L7>20B5;L:%b%6%n %tCBL:%b%7%n %t0720=85 ?@>F5AA0:%b%8%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%9%n %t5@A8O ?>4A8AB5<K:%b%10%n %t5@A8O ?@>4C:B0:%b%2%n

,
$C=:F8O :>=B@>;8@C5<>3> 4>ABC?0 : D09;0< <>3;0 1K 70?@5B8BL >1J5:BC %8 87<5=OBL %7.%n %t@5<O >1=0@C65=8O:%b%5%n %t>;L7>20B5;L:%b%6%n %tCBL:%b%7%n %t0720=85 ?@>F5AA0:%b%8%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%9%n %t5@A8O ?>4A8AB5<K:%b%10%n %t5@A8O ?@>4C:B0:%b%2%n

�

59AB28O "-04<8=8AB@0B>@0 ?@825;8 1K : B><C, GB> A;C610 Exploit Guard 2 Microsoft Defender 701;>:8@>20;0 1K ?>B5=F80;L=>5 >?0A=>5 A5B52>5 ?>4:;NG5=85.%n %t@5<O 2KO2;5=8O:%b%4%n %t>;L7>20B5;L:%b%5%n %t07=0G5=85:%b%6%n %t<O ?@>F5AA0:%b%7%n

�

59AB28O "-04<8=8AB@0B>@0 ?@825;8 : B><C, GB> A;C610 Exploit Guard 2 Microsoft Defender 701;>:8@>20;0 ?>B5=F80;L=> >?0A=>5 A5B52>5 ?>4:;NG5=85.%n %t@5<O >1=0@C65=8O:%b%4%n %t>;L7>20B5;L:%b%5%n %t07=0G5=85:%b%6%n %t<O ?@>F5AA0:%b%7%n

8
$C=:F8O :>=B@>;8@C5<>3> 4>ABC?0 : D09;0< 70?@5B8;0 >1J5:BC %8 2=>A8BL 87<5=5=8O 2 ?0<OBL.%n %t@5<O >1=0@C65=8O:%b%5%n %t>;L7>20B5;L:%b%6%n %tCBL:%b%7%n %t0720=85 ?@>F5AA0:%b%8%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%9%n %t5@A8O ?>4A8AB5<K:%b%10%n %t5@A8O ?@>4C:B0:%b%2%n

<
$C=:F8O :>=B@>;8@C5<>3> 4>ABC?0 : D09;0< 70?@5B8;0 1K >1J5:BC %8 2=>A8BL 87<5=5=8O 2 ?0<OBL.%n %t@5<O >1=0@C65=8O:%b%5%n %t>;L7>20B5;L:%b%6%n %tCBL:%b%7%n %t0720=85 ?@>F5AA0:%b%8%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%9%n %t5@A8O ?>4A8AB5<K:%b%10%n %t5@A8O ?@>4C:B0:%b%2%n

�

>;L7>20B5;L 4>AB83 701;>:8@>20==>9 >?5@0F88 Exploit Guard 2 Microsoft Defender.  %n %t: %b%4%n %t?>;L7>20B5;L: %b%5%n %t?CBL: %b%6%n %t8<O ?@>F5AA0: %b%7%n %tCG0AB2CNI53> D09;0: %b%8%n

,
@>3@0<<0 %1 701;>:8@>20;0 >?5@0F8N, 70?@5I5==CN 04<8=8AB@0B>@><.%n 'B>1K ?>;CG8BL 4>?>;=8B5;L=K5 A2545=8O, >1@0B8B5AL : "-04<8=8AB@0B>@C.%n %t:%b%4%n %t!>AB>O=85: %b%5%n %t5B:0 2@5<5=8:%b%6%n %t59AB285:%b%7%n %t@>F5AA:%b%8%n %tAE>4=K9 >1J5:B:%b%9%n %t&5;52>9 >1J5:B:%b%10%n %t>;L7>20B5;L:%b%11%n %5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%12%n %t5@A8O ?>4A8AB5<K:%b%13%n %t5@A8O ?@>4C:B0:%b%2%n

�
@>3@0<<0 %1 2K?>;=8;0 0C48B >?5@0F88.%n 'B>1K ?>;CG8BL 4>?>;=8B5;L=K5 A2545=8O, >1@0B8B5AL : "-04<8=8AB@0B>@C.%n %t:%b%4%n %t!>AB>O=85:%b%5%n %t5B:0 2@5<5=8:%b%6%n %t59AB285:%b%7%n %t@>F5AA:%b%8%n %tAE>4=K9 >1J5:B:%b%9%n %t&5;52>9 >1J5:B:%b%10%n %t>;L7>20B5;L:%b%11%n %5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%12%n %t5@A8O ?>4A8AB5<K:%b%13%n %t5@A8O ?@>4C:B0:%b%2%n

�
@>3@0<<0 %1 701;>:8@>20;0 >?5@0F8N, 70?@5I5==CN 04<8=8AB@0B>@><.%n'B>1K ?>;CG8BL 4>?>;=8B5;L=K5 A2545=8O, >1@0B8B5AL : "-04<8=8AB@0B>@C.%n%t5@A8O ?>;8B8:8:%b%4%n%t ?@028;0 ?>;8B8:8:%b%5%n%t#@>25=L ?@8=C48B5;L=>3> ?@8<5=5=8O:%b%6%n%t5B:0 2@5<5=8:%b%8%n%t"8? 459AB28O:%b%9%n%t@>F5AA:%b%10%n%tAE>4=K9 >1J5:B:%b%11%n%t&5;52>9 >1J5:B:%b%12%n%t A50=A0:%b%13%n%tSID ?>;L7>20B5;O:%b%14%n%5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%15%n%t5@A8O ?>4A8AB5<K:%b%16%n%t5@A8O ?@>4C:B0:%b%2%n

�
@>3@0<<0 %1 2K?>;=8;0 0C48B >?5@0F88.%n'B>1K ?>;CG8BL 4>?>;=8B5;L=K5 A2545=8O, >1@0B8B5AL : "-04<8=8AB@0B>@C.%n%t5@A8O ?>;8B8:8:%b%4%n%t ?@028;0 ?>;8B8:8:%b%5%n%t#@>25=L ?@8=C48B5;L=>3> ?@8<5=5=8O:%b%6%n%t@8G8=0 0C48B0:%b%7%n%t5B:0 2@5<5=8:%b%8%n%t"8? 459AB28O:%b%9%n%t@>F5AA:%b%10%n%tAE>4=K9 >1J5:B:%b%11%n%t&5;52>9 >1J5:B:%b%12%n%t A50=A0:%b%13%n%tSID ?>;L7>20B5;O:%b%14%n%5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%15%n%t5@A8O ?>4A8AB5<K:%b%16%n%t5@A8O ?@>4C:B0:%b%2%n

0

;85=B Endpoint Protection 8A?@025= 8 @01>B05B.%n %t5@A8O ?;0BD>@<K:%b%2%n %t5@A8O ?>4A8AB5<K:%b%4%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%5%n

	
BG5B > @01>B>A?>A>1=>AB8 :;85=B0 Endpoint Protection (2@5<O 2 D>@<0B5 UTC): %n %t5@A8O ?;0BD>@<K: %b%2%n %t5@A8O ?>4A8AB5<K: %b%4%n %t5@A8O ?>4A8AB5<K ?@>25@:8 A5B8 2 @568<5 @50;L=>3> 2@5<5=8: %b%5%n %t5@A8O A;C61K 0=0;870 0=B828@CA=>9 70I8BK: %b%6%n %t5@A8O A;C61K 0=0;870 0=B8H?8>=A:>9 70I8BK: %b%7%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8 4;O ?@>25@:8 A5B8 2 @568<5 @50;L=>3> 2@5<5=8: %b%8%n %t!>AB>O=85 RTP: %b%9%n %t!>AB>O=85 OA: %b%10%n %t!>AB>O=85 IOAV: %b%11%n %t!>AB>O=85 BM: %b%12%n %t>7@0AB A;C61K 0=0;870 0=B828@CA=>9 70I8BK: %b%13%n %t>7@0AB A;C61K 0=0;870 0=B8H?8>=A:>9 70I8BK: %b%14%n %t>7@0AB ?>A;54=59 1KAB@>9 ?@>25@:8: %b%15%n %t>7@0AB ?>A;54=59 ?>;=>9 ?@>25@:8: %b%16%n %t@5<O A>740=8O A;C61K 0=0;870 0=B828@CA=>9 70I8BK: %b%17%n %t@5<O A>740=8O A;C61K 0=0;870 0=B8H?8>=A:>9 70I8BK: %b%18%n %t@5<O =0G0;0 ?>A;54=59 1KAB@>9 ?@>25@:8: %b%19%n %t@5<O >:>=G0=8O ?>A;54=59 1KAB@>9 ?@>25@:8: %b%20%n %tAB>G=8: ?>A;54=59 1KAB@>9 ?@>25@:8: %b%21%n %t@5<O =0G0;0 ?>A;54=59 ?>;=>9 ?@>25@:8: %b%22%n %t@5<O >:>=G0=8O ?>A;54=59 ?>;=>9 ?@>25@:8: %b%23%n %tAB>G=8: ?>A;54=59 ?>;=>9 ?@>25@:8: %b%24%n %t!>AB>O=85 ?@>4C:B0:%b%25%n

H
@>3@0<<0 %1 >1=0@C68;0 ?>B5=F80;L=> =565;0B5;L=>5 ?@8;>65=85.%n 'B>1K C7=0BL 1>;LH5, A<. ?@82545==K5 40;55 A2545=8O.%n%13%n %t<O:%b%8%n %t:%b%7%n %t!5@L57=>ABL:%b%10%n %t0B53>@8O:%b%12%n %tCBL:%b%22%n %t0G0;> >1=0@C65=8O:%b%24%n %t"8? >1=0@C65=8O:%b%28%n %tAB>G=8: >1=0@C65=8O:%b%18%n %t>;L7>20B5;L:%b%20%n %t0720=85 ?@>F5AA0:%b%19%n %t5@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%41%n %t5@A8O ?>4A8AB5<K:%b%42

x
5@A8O <5E0=87<0 >1=0@C65=8O C3@>7 %1 >1=>2;5=0.%n %t"5:CI0O 25@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%3%n %t@54K4CI0O 25@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%4%n %t"8? <5E0=87<0 >1=0@C65=8O C3@>7:%b%12%n %t"8? >1=>2;5=8O:%b%14%n %t>;L7>20B5;L:%b%8\%9%n %t"5:CI0O 25@A8O O4@0:%b%15%n %t@54K4CI0O 25@A8O O4@0:%b%16

X
@8 >1=>2;5=88 A;C61K 0=0;870 157>?0A=>AB8 2 ?@>3@0<<5 %1 2>7=8:;0 >H81:0.%n %t>20O 25@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%3%n %t@54K4CI0O 25@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%4%n %tAB>G=8: >1=>2;5=8O:%b%6%n %t"8? A;C61K 0=0;870 157>?0A=>AB8:%b%12%n %t"8? >1=>2;5=8O:%b%14%n %t>;L7>20B5;L:%b%8\%9%n %t"5:CI0O 25@A8O ?>4A8AB5<K:%b%15%n %t@54K4CI0O 25@A8O ?>4A8AB5<K:%b%16%n %t>4 >H81:8:%b%17%n %t?8A0=85 >H81:8:%b%18



5@A8O ?>4A8AB5<K %1 1K;0 >1=>2;5=0.%n %t"5:CI0O 25@A8O ?>4A8AB5<K:%b%3%n %t@54K4CI0O 25@A8O ?>4A8AB5<K:%b%4%n %t>;L7>20B5;L:%b%8\%9

�

@8 ?>?KB:5 %1 >1=>28BL ?>4A8AB5<C ?@>87>H;0 >H81:0.%n %t>20O 25@A8O ?>4A8AB5<K:%b%3%n %t@54K4CI0O 25@A8O ?>4A8AB5<K:%b%4%n %t>;L7>20B5;L:%b%8\%9%n %t>4 >H81:8:%b%11%n %t?8A0=85 >H81:8:%b%12

l
 %1 ?@8 ?>?KB:5 >1=>2;5=8O <5E0=87<0 >1=0@C65=8O C3@>7 ?@>87>H;0 >H81:0. @8;>65=85 ?>?KB05BAO 25@=CBLAO : ?@54K4CI59 25@A88.%n%t@54?>;030;>AL CAB0=>28BL A;54CNI89 <5E0=87< >1=0@C65=8O C3@>7:%b%4%n%t>4 >H81:8:%b%5%n%t?8A0=85 >H81:8:%b%6%n%t5@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%9%n%t5@A8O O4@0:%b%10

�

%1 =5 C40;>AL 703@C78BL <>4C;L 70I8BK >B 2@54>=>A=KE ?@>3@0<<, B0: :0: B5:CI0O 25@A8O ?;0BD>@<K =5 ?>445@68205BAO. %1 25@=5BAO : ?>A;54=5<C ?>4E>4OI5<C <>4C;N 8 ?>?KB05BAO >1=>28BL ?;0BD>@<C.%n %t"5:CI0O 25@A8O ?;0BD>@<K:%b%2



@>87>H;0 >H81:0 %1 ?@8 ?>?KB:5 >1=>2;5=8O ?;0BD>@<K.%n %t"5:CI0O 25@A8O ?;0BD>@<K:%b%2%n %t>4 >H81:8:%b%4%n %t?8A0=85 >H81:8:%b%5

�

%1 A:>@> ?>B@51C5BAO 1>;55 =>20O 25@A8O ?;0BD>@<K 4;O ?>445@6:8 1C4CI8E 25@A89 <>4C;O 70I8BK >B 2@54>=>A=KE ?@>3@0<<. !:0G09B5 ?>A;54=NN ?;0BD>@<C %1, GB>1K >15A?5G8BL <0:A8<0;L=CN 70I8BC.%n %t"5:CI0O 25@A8O ?;0BD>@<K:%b%2

$

%1 >1=>2;5=8O ?;0BD>@<K %4 ?@8>AB0=>2;5=> 87-70 459AB289 A8AB5<K. >?>;=8B5;L=K5 A2545=8O A<. 2 ?>A;54=59 70?8A8 MpLog*.log 2 ProgramData.%n

`
%1 >1=>2;5=85 ?;0BD>@<K %4 2>7>1=>2;5=>.%n

l
 %1 8A?>;L7>20=0 >1;0G=0O 70I8B0 4;O ?>;CG5=8O 4>?>;=8B5;L=>3> <5E0=87<0 >1=0@C65=8O C3@>7.%n %t"5:CI0O 25@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%3%n %t"8? <5E0=87<0 >1=0@C65=8O C3@>7:%b%12%n %t>;L7>20B5;L:%b%8\%9%n %t"5:CI0O 25@A8O O4@0:%b%15%n %t"8? 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%23%n %tCBL A8AB5<K CAB>9G82>AB8:%b%24%n %t5@A8O 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%25%n %t5B:0 2@5<5=8 A1>@:8 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%26%n %t"8? >3@0=8G5=8O A8AB5<K CAB>9G82>AB8:%b%28%n %t3@0=8G5=85 A8AB5<K CAB>9G82>AB8:%b%29

|
 %1 8A?>;L7>20=0 >1;0G=0O 70I8B0 4;O C40;5=8O CAB0@52H8E >1=>2;5=89 <5E0=87<0 >1=0@C65=8O C3@>7.%n %t"5:CI0O 25@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%3%n %t"8? <5E0=87<0 >1=0@C65=8O C3@>7:%b%12%n %t"5:CI0O 25@A8O O4@0:%b%15%n %t"8? 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%23%n %tCBL A8AB5<K CAB>9G82>AB8:%b%24%n %t5@A8O 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%25%n %t5B:0 2@5<5=8 A1>@:8 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%26%n %t@8G8=0 C40;5=8O:%b%31%n %t"8? >3@0=8G5=8O A8AB5<K CAB>9G82>AB8:%b%28%n %t3@0=8G5=85 A8AB5<K CAB>9G82>AB8:%b%29

�
 %1 ?@>87>H;0 >H81:0 ?@8 ?>?KB:5 8A?>;L7>20=8O >1;0G=>9 70I8BK.%n %t"5:CI0O 25@A8O <5E0=87<0 >1=0@C65=8O C3@>7:%b%3%n %t"8? <5E0=87<0 >1=0@C65=8O C3@>7:%b%12%n %t>;L7>20B5;L:%b%8\%9%n %t"5:CI0O 25@A8O O4@0:%b%15%n %t>4 >H81:8:%b%17%n %t?8A0=85 >H81:8:%b%18 %t"8? 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%23%n %tCBL A8AB5<K CAB>9G82>AB8:%b%24%n %t5@A8O 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%25%n %t5B:0 2@5<5=8 A1>@:8 8=B5;;5:BC0;L=>3> <5E0=87<0 >1;0G=>9 70I8BK:%b%26%n %t"8? >3@0=8G5=8O A8AB5<K CAB>9G82>AB8:%b%28%n %t3@0=8G5=85 A8AB5<K CAB>9G82>AB8:%b%29



@>3@0<<0 %1 >B<5=8;0 2A5 0=0;8B8G5A:85 A;C61K >1;0G=>9 70I8BK.%n %t>;L7>20B5;L:%b%8\%9%n %t"5:CI0O 25@A8O >1@01>BG8:0:%b%15

h
%1 >1=>2;5=85 ?;0BD>@<K %2 CA?5H=> 2K?>;=5=>.%n

(

@>3@0<<0 %1 A:0G0;0 0=B828@CA=CN ?@>3@0<<C 2 Microsoft Defender (02B>=><=>5 A:0=8@>20=85) 8 =0AB@>8;0 55 =0 70?CA: ?@8 A;54CNI59 ?5@5703@C7:5.

|

@8 ?>?KB:5 A:0G0BL 8 =0AB@>8BL 0=B828@CA=CN ?@>3@0<<C 2 Microsoft Defender (02B>=><=>5 A:0=8@>20=85) 2 @01>B5 ?@>3@0<<K %1 ?@>87>H;0 >H81:0.%n%t>4 >H81:8:%b%4%n%t?8A0=85 >H81:8:%b%5

D

!@>: 459AB28O ?>445@6:8 >?5@0F8>==>9 A8AB5<K A:>@> 70:>=G8BAO. 0?CA: %1 2 >?5@0F8>==>9 A8AB5<5 157 ?>445@6:8�  =54>AB0B>G=>5 @5H5=85 4;O 70I8BK >B C3@>7.%n

,

!@>: 459AB28O ?>445@6:8 >?5@0F8>==>9 A8AB5<K 8AB5:. 0?CA: %1 2 >?5@0F8>==>9 A8AB5<5 157 ?>445@6:8�  =54>AB0B>G=>5 @5H5=85 4;O 70I8BK >B C3@>7.%n

\

!@>: 459AB28O ?>445@6:8 >?5@0F8>==>9 A8AB5<K 8AB5:. %1 1>;LH5 =5 ?>445@68205BAO =0 20H59 >?5@0F8>==>9 A8AB5<5, ?5@5AB0; @01>B0BL 8 =5 70I8I05B >B 2@54>=>A=KE ?@>3@0<<.%n

�
!;C610 %1 703@C78;0 D09; 4;O 40;L=59H53> 0=0;870.%n %t<O$09;0:%b%3%n %tSha256:%b%4%n

�

 ?@>3@0<<5 %1 2>7=8:;0 >H81:0 ?@8 ?>?KB:5 >B?@028BL ?>4>7@8B5;L=K9 D09; 4;O 40;L=59H53> 0=0;870.%n %t<O D09;0:%b%3%n %tSha256:%b%4%n %t"5:CI0O 25@A8O A;C61K 0=0;870 157>?0A=>AB8:%b%5%n %t"5:CI0O 25@A8O ?>4A8AB5<K:%b%6%n %t>4 >H81:8:%b%7%n

|

 E>45 2K?>;=5=8O DC=:F88 70I8BK 2 @50;L=>< 2@5<5=8 %1 ?@>87>H;0 >H81:0, 8 DC=:F8O 7025@H8;0 A2>N @01>BC.%n %t$C=:F8O:%b%3%n %t>4 >H81:8:%b%5%n %t?8A0=85 >H81:8:%b%6%n %t@8G8=0:%b%4

�

$C=:F8O 70I8BK 2 @50;L=>< 2@5<5=8 %1 1K;0 ?5@570?CI5=0.  5:><5=4C5BAO 2K?>;=8BL ?>;=CN ?@>25@:C A8AB5<K, GB>1K >1=0@C68BL ;N1K5 >1J5:BK, :>B>@K5, 2>7<>6=>, 1K;8 ?@>?CI5=K 87-70 2@5<5==>3> 157459AB28O 40==>3> 035=B0.%n %t$C=:F8O:%b%3%n %t@8G8=0:%b%4

�
%1 :;NG5=0 70I8B0 2 @50;L=>< 2@5<5=8 A ?>8A:>< 2@54>=>A=KE 8 4@C38E ?>B5=F80;L=> =565;0B5;L=KE ?@>3@0<<.

�
%1 K:;NG5=0 70I8B0 2 @50;L=>< 2@5<5=8 A ?>8A:>< 2@54>=>A=KE 8 4@C38E ?>B5=F80;L=> =565;0B5;L=KE ?@>3@0<<.

�
>=D83C@0F8O DC=:F88 70I8BK 2 @50;L=>< 2@5<5=8 %1 87<5=8;0AL.%n %t$C=:F8O:%b%3%n %t>=D83C@0F8O:%b%4

�

>=D83C@0F8O %1 87<5=8;0AL. A;8 40==>5 A>1KB85 AB0;> =5>6840==>ABLN, A;54C5B ?@>25@8BL ?0@0<5B@K; 2>7<>6=>, 87<5=5=85 2K720=> 2@54>=>A=>9 ?@>3@0<<>9.%n %t!B0@>5 7=0G5=85:%b%3%n %t>2>5 7=0G5=85:%b%4



%1 1K; 7025@H5= 87-70 =5?@542845==>9 >H81:8.%n %t"8? >H81:8:%b%5%n %t>4 8A:;NG5=8O:%b%6%n %t 5AC@A:%b%3%n %t>4 >1@01>BG8:0:%b%7

�
%1, 254CI0O ?>8A: H?8>=A:8E 8 4@C38E ?>B5=F80;L=> 2@54>=>A=KE ?@>3@0<<, 2:;NG5=0.

�
%1, 254CI0O ?>8A: H?8>=A:8E 8 4@C38E ?>B5=F80;L=> 2@54>=>A=KE ?@>3@0<<, 2K:;NG5=0.

H
@>25@:0 %1 =0 28@CAK 2:;NG5=0.

L
@>25@:0 %1 =0 28@CAK >B:;NG5=0.

x
0I8B0 >B ?>445;:8 %3 87<5=5=85 2 %1.%n %t=0G5=85:%b%4

�
%1 <>=8B>@ @5AC@A>2: ?>B@51;5=85 ?0<OB8 ?@52KA8;> ?@545;.%n %tG8A;> ?>?040=89: %b%3%n %tB5:CI55 ?>@>3>2>5 7=0G5=85: %b%4

�
%1 <>=8B>@ @5AC@A>2: 703@C7:0 & ?@52KA8;0 ?@545;.%n %tG8A;> ?>?040=89: %b%3%n %tB5:CI55 ?>@>3>2>5 7=0G5=85: %b%4

�
%1 A;C610 7028A;0 2> 2@5<O 7025@H5=8O @01>BK.%n %tTimout (A5:C=4): %b%3%n %tComponent: %b%4%n %tSelf-terminated: %b%5

p

%1 a
M3�+
	
� �

�B�U
� =
U T�

�k
 c
�U
�
 �8 �OW
O
O �H
� �
�)
B
T
.%K
 %B� 
�B_Y

:%J%3%;  %g
� ��<
FU
.! V
��_
�;:%L%5%K
 %g
�

�<<� ��
 �e
�
�B)
1;:%J%6%� %e
S�Q
Y
 
�
�:%L%7%H
 %c
�Y
Y
�
� 

U
Y
��e
�� :%2%8%K


�4VS_VERSION_INFO��
�e�e?"
StringFileInfo�
041904B0L
CompanyNameMicrosoft CorporationX
FileDescription>4C;L @5AC@A>2 A>1KB898
InternalNameMpEvMsg.dll~-
LegalCopyright� >@?>@0F8O 09:@>A>DB. A5 ?@020 70I8I5=K.H
OriginalFilenameMpEvMsg.dll.muir)
ProductName?5@0F8>==0O A8AB5<0 Microsoft� Windows��8
FileVersion4.18.26080.3 (9e1f3147fbc83f18a98a965394a23e07747d7295)>

ProductVersion4.18.26080.3D
VarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD(0�(	*�H��

��'�0�'�

10
	`�H
e
0\
+

�7
�N0L0
+

�7
0	
���010
	`�H
e
 �5���E���:��$M�෎����a-iA��
0�a0�I�
3
$]��q� ��
$0
	*�H��


0S10	UUS10U
Microsoft Corporation1$0"UWindows Production PCA 20230
260430183934Z
270429183934Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�
�0
	*�H��



�
�0�
��
��4�bI��p�%�x�3 m���˝~���83`�;P#tίe��C�#3�&��	�j���1z�Q��,-�KM���_�ɨ$�8�
/���
?��vE���^Wxq�e��nQ�v��ϗ3�I�~d��B�o�K�>w/���LF������"U�	HP��	LR�.�k'�mAѶ�t�ի
!N	_G��aE3�X�2�r��0�{:s���V1!��i�a�F�4�j8.�.�wk!�G'��	�X��n̍���d%�&_'�9���4ˑk[�;��?�9��ē���x����+vE��->�L�T��C�_ �n#��o�]y��Og���V��gHG+?��at��ʮ,1�^r-�������15�t�

��
�0�
�0U

��0U%0
+

�7
+
0U+N����N�"�����!�	0EU>0<�:0810UMicrosoft Corporation10U
500446+5079150U#0����?Z	�=!U�1S"�0ZUS0Q0O�M�K�Ihttp://www.microsoft.com/pkiops/crl/Windows%20Production%20PCA%202023.crl0g+


[0Y0W+
0�Khttp://www.microsoft.com/pkiops/certs/Windows%20Production%20PCA%202023.crt0U

�00
	*�H��


�
�4Z��
���
1��
�	�˫5F��V�5��;DŐ-%�ۚ�i�����
���
�M���r�'4�Ɣ��!I皸a08.�wq��̔`Щ�!əO�����{�����y��eNu���j�҂�����Xf��C
�˼�S�.�
T�QG���R��|d5$����k���O���J��L3���$�|���!&O̅X=��H\�\��{�P�Ξ�e��;�ϳb��'iN���۲c����-f�x��9��b�+�V#)�!˜�y���^\�);��W툊k
Lf3���S71��� �r�P��`FV�sa��� /C)Ҩ:�/Њ$n�Eh�1�w�o�mGP��6�h��~�!R����&���a��r��!
4��� Bs�w�r��_�ew�|�8�bP�O�B�_�L�;����p��5�z����Ι/2�)�t�a��#Z�\�ԝ�l�(�CR�|�3�!^
�B�$������VH�,�F��D?�0��0���
3��V	K��!0
	*�H��


0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
230613183415Z
350613184415Z0S10	UUS10U
Microsoft Corporation1$0"UWindows Production PCA 20230�"0
	*�H��



�0�
�
�.�
]nqK��H���b!�NF��-i�Y�3���'x���v}���/g��W����@�Sp����גrKҳ>��e�)�V�ƃ�o���[��y��2��������i�]U`�˰ʹ������g����xL�m
%5����uG<�>#��ҥ_x
B�f.��ޕFo��)���ݹ�<-�}���έ���=p2蝁y��Q���UAo���C�ĵ����Z�U~�f*>��P�I!#�x(Lii�njk�I��sWL��3uo�Ŀ���X�-*e+�H$�
��y��\�
��n%�8���!���_>�Զ
RH�0ƥ>f��~4�Qb�o�=����5?QI^�}�����P�u��O�lzp0H}q���RQ#��O�3�J/�xw_�	W��;Q5x?�E��pd���"H��i�'ư ��<��N���d"�άk���ˡ��<$��q����s�х[*:�4
G���g�c�%,�CXt��E���p������

��
F0�
B0U

�
�0	+

�7

0U���?Z	�=!U�1S"�0	+

�7
SubCA0U

�0

�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+


N0L0J+
0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��


�
�0Bh߄�<�o��Nr��U���|q���5��r5����wy^�Hw��4��A���`�6�(י�V�o�BRm�Mv��s%�����D��� �Д�(��8-n���E"}��K��|���lB�s�y����[���Q���`riAj��/7�X,!�Nvw�Z����*Yۺ�T��
�Jq�ƾ�a�܀�r�?T�AG���ޖ��B��sQ���W[4��Y�eɃ�`�	�z�+���t����8�+[ge��
<	�WI
� 2i�K ��
M�Ky��W�{ԜGH������$��r9���{�.�Y�k�����!��Bt�5�ϼ߳�.���:�ݒa��5ʡ��ήz�-�{]v�Z����\aL�lt��ov�s
��|jll8���U��pkJ��{���Dqۋ`Q��Jzz�Q�D�=��E�_c
E�oM0v��݁�U�ʃ��UF����
��]���k%Xa
�	��Jb�^g|X\��#��okPy/�p1�]0�Y

0j0S10	UUS10U
Microsoft Corporation1$0"UWindows Production PCA 20233
$]��q� ��
$0
	`�H
e
���0	*�H��

	1
+

�7
0
+

�7
10
+

�7
0/	*�H��

	1" �;WM5�iC
��'I�U_6kIUu���Y��M��0B
+

�7
1402��Microsoft��http://www.microsoft.com0
	*�H��



�
�"���`���˥^.94��DI�HB�7+��j������H�Ÿf�	�0E7��܃��
��?ɪ
�)3�2����G�!Ģu�6�.�(������É�{{�_���}&7?Tz�m�4���r(��y+	:�9Z{u�"�[�����Ʇ2�2��1N>�*��z]��&���(�IGLz����>�4q�l�t-��'{C����ۋ�IN4��u�kS���ɣl_ƣW���\�a�`��I����=�n5��6��*����A�-W���Sْ�$�K�
�6�ڟ��pŽaD�
����2�T�� n���;27���OQW�� •Kn[�ƒ��i��Œ���8GL�Ş�&4H��^/�k-����0��
+

�7
1�0�{	*�H��

��l0�h
10
	`�H
e
0�
Q*�H��

	
��
@�
<0�
8


+

�Y

010
	`�H
e
 ����F(]L<�g��eБ�7�I�(��7�E?�j}�)��20260815031123.21Z0�
�Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:8603-05E0-D9471%0#UMicrosoft Time-Stamp Service���0� 0��
3%��7�ͪwI
%0
	*�H��


0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
260219194001Z
270517194001Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:8603-05E0-D9471%0#UMicrosoft Time-Stamp Service0�"0
	*�H��



�0�
�
�����\�/�j�"Sz�I��Ze�w���.�z���`B�Z��?�i]��d�Q�v ����H���
�
�K$$"D7
����h���1zW��
Sxx�տ��F�'*L�P
��Aں!ɜ-��|0��N�AD��,V�[�\�wtmp�t�Yk���W^/?ν�_%����V��щ��lz8���"W(�%�9I�h�Q���1"fZ9<�&Z�-g��j��P�d'l��KH+��6D@d�,�	 ox�����ϑ �@��rNJ��t�>�^0'.��Atu��Xj���-X�������d�Ϻ�ه"ީ�Q��(���'	�F.����U��A�Kz��><
��#|,�i�P�
W�Ol�����]_�9�k�(A��q+�o���g��0���� 6Dm��{��N��NQrg��D;rT
s\��f��2�Q.�l��
����9�݆�}��� �Ju�����x`n�|~���D
G?p\ߘ$�E��rX�

��
I0�
E0U�8ҪN�_peK�����w0U#0���]^b]����e�S5�r0_UX0V0T�R�P�Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+


`0^0\+
0�Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0U

�00U%

�0
+
0U

��0
	*�H��


�
��6�L���%J���|q��iIZ�!2es��x�G�ܓ:���_~K/��tH���2��xZֹ��[�����+|
B�>�,��<a,L_�`KYL��b���i*��i�هx��>&��M�P�gkęyZD�t���\��+?�9�B6�a�>� �i���J�
2"�y�uy,��5�8blo	�wLV�ht��&���f���$�
�����G�߁J<�}/Rv�`�)Z��A��I�!YvF��2� ��4�ĨU��Z��5RKG�mJNWB��GBɷųڗb�w5�=
+gM�%��6F%R<�>��u�>��"Tl��G���t�C�z�l�[1d�Z��x��W��
���cB:8�&T���>OGp��PT�IΠ�����V�N(�����Aw��2�C���ؔ{�x�����e���m�̶;�Ȉ�V��0�@�"g��s��	�����ύ�
o3��~|{�=�H�J���fS,д�j�.0�q0�Y�
3��k��I�0
	*�H��


0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��



�0�
�
��L�r!y���$y�Ղ��ҩlNu��5W�
lJ�⽹>`3�\O�f��SqZ�~JZ��6g�F#���w2��`}jR�D���Fk��v��P�D�q\Q17�
8n����&S|9azĪ�ri����6�5&dژ;�{3��[~��R���b%�j�]�S���VM�ݼ��㑏�9,Q��pi
�6-p�1�5(�㴇$��ɏ~�T��U�mh;�F��z)7���E�Fn�2��0\O,�b�͹⍈䖬
J��q�[g`���=� �s}A�Fu��_4���� }~�ٞE߶r/�}_��۪~6�6L�+n�Q���s�M7t�4���G��|?Lۯ^����s=CN�39L��Bh.�QF�ѽjZa
s�g�^�(v�3rק ��
�co�6d�[���!]_0t���عP��a�65�G������k�\RQ]�%��Pzl�r�Rą��<�7�?x�E���^ڏ�riƮ{��>j�.�

��
�0�
�0	+

�7


0#	+

�7*�R�d���<F5)��/�0U��]^b]����e�S5�r0\U U0S0Q+

�7L�}

0A0?+

3http://www.microsoft.com/pkiops/Docs/Repository.htm0U%0
+
0	+

�7
SubCA0U
�0U

�0

�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+


N0L0J+
0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��


�
�U}�*��,g
1$[�rK��o�\�>NGdx���=13�9��q6?�dl|�u9m�1��lѡ�"��fg:SMݘ��x�6.���V����i�	�{�jo�)�n�?Hu
��m��m#T�xSu$W�ݟ�=��h�e��V����(U'�$�@���]='�@�8���)�ü�T�B�������j�BRu�6��as.,k{n?,	x鑲�[�I�t�쑀�=�J>f;O���2ٖ�
���t��Lro�u0�4�z�P�
X�@<�Tm�ctH,�NG-�q�d�$�smʎ	��
WITd�s�[D
�Z�k
��(�g($�8K�n�!TkjEG����^O���Lv�WT	�i
D~|�als�
��Af=i��AI~~���;����>�1Q������{��p���(��6ںL���
�4�$5g+�
�挙��"��'B=%��tt[jў>�~�13}���{�8pDѐ�ȫ:�:b�pcSM��m��qj�U3X��pf�M0�5

0����Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:8603-05E0-D9471%0#UMicrosoft Time-Stamp Service�#


0+So��8�#�<9pnIl^���0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��


�)��0"20260814161223Z20260815161223Z0t0:
+

�Y

1,0*0
�)��
0
8�0
0
�+g
06
+

�Y
1(0&0
+

�Y
�
0
� �
0

��0
	*�H��


�

("t�0��,�@�[	�m��`t�;m��|jn�/�&�e5i���*�ݍّ�j������<�#�轩�ĈD����Xr�^�*'Tdzw%<{ŵ�lGT��	c��:
D��i=�A[=}�oe�!�ec,�d�͗ׯ�]ظ|��Bw$���c�czM4H���MK6��!:Fy�5�:�Fm�t�i>R���M���
��ŀ�7��{�d��V��3�K�"FãZS�[&G@���E�):L�5I�1�
0�	

0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103%��7�ͪwI
%0
	`�H
e
��
J0	*�H��

	1
*�H��

	
0/	*�H��

	1" �j�y;��vdI�;�{�R����ҷ�ᚄ��0��*�H��

	/1��0��0��0�� V
�z8��`�_�@�¸�Y�t%1j3��0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103%��7�ͪwI
%0" �-�vW#�;�)��pt��-���ƥ�6����0
	*�H��


���Ԧa�s	�Ǧ�F�e�6��Md�� �i�"d��y�<��	�
��w�&Q�����3)���ie^C���R�`�o�|Y�4+rW��}<.W]al�fh���@��2�|���Ϫ�ذ�EO�����:��2S�x\�#٦���'�eo2���?�n��pr�{"G:�h �?��7�����-8&o\s|��?ޛ�GX¹A"�)�/��#i���?��.�������
e���`���p@zp�,m��%��4Jn��/���#w��X_�Ẑ%6�5GHv1�Lh����D������gxڹ��!|�a�Kcln	W��U�Ig��Ń�N�!aC'E
���aZ�X�۾DZ��H��ӳ�K^Bd�5T $R1#zP�ˊ�s0{��pA
Yo8$g��'f2{c�Kr���c@�O~�X}�I��e<���
�T7�)f 8
�
��t.�c���)�f�"��ek�$}��'���_Z�*�C713d���`�a2