????

Your IP : 3.142.242.51


Current Path : C:/Program Files/Windows Defender/
Upload File :
Current File : C:/Program Files/Windows Defender/MpEvMsg.dll

MZ����@���	�!�L�!This program cannot be run in DOS mode.

$��<߱�R���R���R�U�����R�U�P���R�Rich��R�PEd�����" �


*`A h�H!T.rdata�@@.rsrch� � @@���
TTT���$�������T.rdataT|.rdata$zzzdbg .rsrc$01!X�.rsrc$02 >6F��G��E>�.��\�V��L5�1Q�����(���@�X�p�����	�	�	����$��!�
WEVT_TEMPLATEMUI�4VS_VERSION_INFO��@s@s?�StringFileInfo�040904B0LCompanyNameMicrosoft CorporationTFileDescriptionEvent Resource Modulen'FileVersion4.18.1907.16384 (WinBuild.160101.0800)8InternalNameMpEvMsg.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.@OriginalFilenameMpEvMsg.dllj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion4.18.1907.16384DVarFileInfo$Translation	�CRIM�������N��_�߽,x$WEVT���tX
���(�������CHAN����������dMicrosoft-Windows-Windows Defender/OperationalTMicrosoft-Windows-Windows Defender/WHCTTBLh�@TEMPH	��U�IKp�]e�����/��ND�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Current security intelligence Version
A��w�oData_K�Name&Previous security intelligence Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��k�oDataSK�Name Security intelligence Type Index
A��_�oDataGK�NameSecurity intelligence Type
A��M�oData5K�NameUpdate Type Index
A��A�oData)K�NameUpdate Type

A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
(Hl�	$	8	L	`	p	|	�	
(
D
x
 Product Name$Product VersionPCurrent security intelligence VersionTPrevious security intelligence VersionUnusedUnused2Unused3DomainUserSIDHSecurity intelligence Type Index<Security intelligence Type(Update Type IndexUpdate Type4Current Engine Version4Previous Engine VersionTEMP ��P}gR����&�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Current security intelligence Version
A��w�oData_K�Name&Previous security intelligence Version
A��Q�oData9K�NameUpdate Source Index
A��E�oData-K�Name
Update Source
A��7�oDataK�NameUnused
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��k�oDataSK�Name Security intelligence Type Index
A��_�oDataGK�NameSecurity intelligence Type
A��M�oData5K�NameUpdate Type Index
A��A�oData)K�NameUpdate Type

A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��O�oData7K�NameUpdate State Index
A��C�oData+K�NameUpdate State
A��A�oData)K�NameSource Path
x��`������8t��� <d�� Product Name$Product VersionPCurrent security intelligence VersionTPrevious security intelligence Version,Update Source Index Update SourceUnusedDomainUserSIDHSecurity intelligence Type Index<Security intelligence Type(Update Type IndexUpdate Type4Current Engine Version4Previous Engine VersionError Code(Error Description,Update State Index Update StateSource PathTEMP����]J^e�Vł?y�4�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��E�oData-K�Name
Feature Index
A��C�oData+K�NameFeature Name

0T�����(<Pp Product Name$Product Version4Current Engine Version4Previous Engine VersionUnusedUnused2Unused3DomainUserSIDUnused4Unused5 Feature Index Feature NameTEMP�!�!�76�W	ı#.�Y���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��W�oData?K�NameCurrent Engine Version
A��Y�oDataAK�NamePrevious Engine Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��O�oData7K�NameUpdate State Index
A��C�oData+K�NameUpdate State

�"#<#p#�#�#�#�#�#$$,$T$�$ Product Name$Product Version4Current Engine Version4Previous Engine VersionUnusedUnused2Unused3DomainUserSIDError Code(Error Description,Update State Index Update StateTEMPX

h(ԋ�f��U�'�dP�C���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Security intelligence Attempted Index
A��i�oDataQK�NameSecurity intelligence Attempted
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��u�oData]K�Name%Loading security intelligence version
A��W�oData?K�NameLoading engine version
	0)P)t)�)*$*L*`*t*�* Product Name$Product VersionPSecurity intelligence Attempted IndexDSecurity intelligence AttemptedError Code(Error DescriptionUnusedUnused2PLoading security intelligence version4Loading engine versionTEMP��4�FK���[݇�|бm���	D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Current security intelligence Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��k�oDataSK�Name Security intelligence Type Index
A��_�oDataGK�NameSecurity intelligence Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��{�oDatacK�Name(Cloud protection intelligence Type Index
A��o�oDataWK�Name"Cloud protection intelligence Type
A��K�oData3K�NamePersistence Path
A��u�oData]K�Name%Cloud protection intelligence Version
A����oDatayK�Name3Cloud protection intelligence Compilation Timestamp
A��c�oDataKK�NamePersistence Limit Type Index
A��W�oData?K�NamePersistence Limit Type
A��Y�oDataAK�NamePersistence Limit Value
707T7�7�7�7�7�788$8l8�8�8�899,9@9X9p9�9�9,:T:�:;P;�; Product Name$Product VersionPCurrent security intelligence VersionUnusedUnused2Unused3Unused4DomainUserSIDHSecurity intelligence Type Index<Security intelligence TypeUnused5Unused64Current Engine VersionUnused7Unused8Unused9Unused10Unused11Unused12XCloud protection intelligence Type IndexLCloud protection intelligence Type(Persistence PathPCloud protection intelligence VersionlCloud protection intelligence Compilation Timestamp@Persistence Limit Type Index4Persistence Limit Type4Persistence Limit ValueTEMP�@F��-��ا]�5����'���T
D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Current security intelligence Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��k�oDataSK�Name Security intelligence Type Index
A��_�oDataGK�NameSecurity intelligence Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��{�oDatacK�Name(Cloud protection intelligence Type Index
A��o�oDataWK�Name"Cloud protection intelligence Type
A��K�oData3K�NamePersistence Path
A��u�oData]K�Name%Cloud protection intelligence Version
A����oDatayK�Name3Cloud protection intelligence Compilation Timestamp
A��c�oDataKK�NamePersistence Limit Type Index
A��W�oData?K�NamePersistence Limit Type
A��Y�oDataAK�NamePersistence Limit Value
A��S�oData;K�NameRemoval Reason Index
A��S�oData;K�NameRemoval Reason Value
�H�H�H@ITIhI|I�I�I�I�IJDJXJlJ�J�J�J�J�JK$K|K�K�K@L�L�L MTM�M Product Name$Product VersionPCurrent security intelligence VersionUnusedUnused2Unused3Unused4DomainUserSIDHSecurity intelligence Type Index<Security intelligence TypeUnused5Unused64Current Engine VersionUnused7Unused8Unused9Unused10Unused11Unused12XCloud protection intelligence Type IndexLCloud protection intelligence Type(Persistence PathPCloud protection intelligence VersionlCloud protection intelligence Compilation Timestamp@Persistence Limit Type Index4Persistence Limit Type4Persistence Limit Value0Removal Reason Index0Removal Reason ValueTEMP��WV��*t�Q��*�;4�K���	D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Current security intelligence Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��k�oDataSK�Name Security intelligence Type Index
A��_�oDataGK�NameSecurity intelligence Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
A��9�oData!K�NameUnused7
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��{�oDatacK�Name(Cloud protection intelligence Type Index
A��o�oDataWK�Name"Cloud protection intelligence Type
A��K�oData3K�NamePersistence Path
A��u�oData]K�Name%Cloud protection intelligence Version
A����oDatayK�Name3Cloud protection intelligence Compilation Timestamp
A��c�oDataKK�NamePersistence Limit Type Index
A��W�oData?K�NamePersistence Limit Type
A��Y�oDataAK�NamePersistence Limit Value
�YZ(ZxZ�Z�Z�Z�Z�Z�Z�Z@[|[�[�[�[�[\0\D\X\p\�\]<]�]�]8^l^ Product Name$Product VersionPCurrent security intelligence VersionUnusedUnused2Unused3Unused4DomainUserSIDHSecurity intelligence Type Index<Security intelligence TypeUnused5Unused64Current Engine VersionUnused7Error Code(Error DescriptionUnused8Unused9Unused10XCloud protection intelligence Type IndexLCloud protection intelligence Type(Persistence PathPCloud protection intelligence VersionlCloud protection intelligence Compilation Timestamp@Persistence Limit Type Index4Persistence Limit Type4Persistence Limit ValueTEMP�hcǾ�9���V64"������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��u�oData]K�Name%Current security intelligence Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��k�oDataSK�Name Security intelligence Type Index
A��_�oDataGK�NameSecurity intelligence Type
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6

A��W�oData?K�NameCurrent Engine Version
�d�d�d(e<ePedexe�e�e�e�e,f@fTf Product Name$Product VersionPCurrent security intelligence VersionUnusedUnused2Unused3Unused4DomainUserSIDHSecurity intelligence Type Index<Security intelligence TypeUnused5Unused64Current Engine VersionTEMPTpg<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
�g�g Product Name$Product VersionTEMP��iO�U��W�'���������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
j jDjXjtj Product Name$Product VersionUnusedError Code(Error DescriptionTEMPT�k<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
�k�k Product Name$Product VersionTEMPT�l<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
m m Product Name$Product VersionTEMP�oO�U��W�'���������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
ho�o�o�o�o Product Name$Product VersionUnusedError Code(Error DescriptionTEMP�qj\c��Y{�t��&&Z���D�	EventDataA��C�oData+K�NameProduct Name
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
Xqxq�q Product NameUnusedUnused2TEMP��rj\c��Y{�t��&&Z���D�	EventDataA��C�oData+K�NameProduct Name
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
�rs(s Product NameUnusedUnused2TEMP�Ttj\c��Y{�t��&&Z���D�	EventDataA��C�oData+K�NameProduct Name
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
�t�t�t Product NameUnusedUnused2TEMP(@v�nT:rP[�/�������4D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��;�oData#K�NameFilename
A��7�oDataK�NameSha256
�v�v�v�v Product Name$Product VersionFilenameSha256TEMP$�yʝ�'qVC�x��ITw��TD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��;�oData#K�NameFilename
A��7�oDataK�NameSha256
A��u�oData]K�Name%Current security intelligence Version
A��W�oData?K�NameCurrent Engine Version
A��?�oData'K�Name
Error Code
z4zXzpz�z�z{ Product Name$Product VersionFilenameSha256PCurrent security intelligence Version4Current Engine VersionError CodeTEMPT|<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
4|T| Product Name$Product VersionTEMPD�}o��!�C�]�	���k��BD�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��?�oData'K�Name
Error Code
A��A�oData)K�NameHttp Status
@~`~�~�~ Product Name$Product VersionError CodeHttp StatusTEMP�$�Ի��\�~,9����2D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��G�oData/K�NameScan Resources
� �D�X�|������� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSID$Scan ResourcesTEMP�

L���?�#��S�a�}.1:���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��I�oData1K�NameScan Time Hours
A��M�oData5K�NameScan Time Minutes
A��M�oData5K�NameScan Time Seconds
P�p�����̉��8�L�\�h����� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSID$Scan Time Hours(Scan Time Minutes(Scan Time SecondsTEMP�

���VY�Z{�	R�ϸ���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	��܎��8�P�������ȏ Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDTEMP�

���VY�Z{�	R�ϸ���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	��ԓ���0�H�x������� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDTEMP�

���VY�Z{�	R�ϸ���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	��̘��(�@�p������� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDTEMPx��@�q���U��#mߖ$��~D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��9�oData!K�NameScan ID
A��I�oData1K�NameScan Type Index
A��=�oData%K�Name	Scan Type
A��U�oData=K�NameScan Parameters Index
A��I�oData1K�NameScan Parameters
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
h����������,�P�d�t����� Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUserSIDError Code(Error DescriptionTEMP\X�(}<A�xX��xhg����`D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��W�oData?K�NameDetection Source Index
A��K�oData3K�NameDetection Source
A��7�oDataK�NameUnused
A��C�oData+K�NameProcess Name
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��?�oData'K�Name
Path Found
A��W�oData?K�NameDetection Origin Index
A��K�oData3K�NameDetection Origin
A��W�oData?K�NameExecution Status Index
A��K�oData3K�NameExecution Status
A��S�oData;K�NameDetection Type Index
A��G�oData/K�NameDetection Type
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
����̪� �H�\�|�������ȫ����,�H�|���ج�0�T�h�|������� Product Name$Product Version Detection ID4Detection Source Index(Detection SourceUnused Process NameDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPath Found4Detection Origin Index(Detection Origin4Execution Status Index(Execution Status0Detection Type Index$Detection TypeUnused2Unused3 Severity Name Category Name@Security intelligence Version$Engine VersionTEMPD
0���~��G@XJt�[L����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��A�oData)K�NameStatus Code
A��O�oData7K�NameStatus Description
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��U�oData=K�NameCleaning Action Index
A��I�oData1K�NameCleaning Action
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
`�����ĸظ��4�H�X�d�������й����L�p�����������@� Product Name$Product Version Detection IDUnusedUnused2Status Code,Status DescriptionDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused3Unused40Cleaning Action Index$Cleaning ActionUnused5Unused6Unused7Unused8 Severity Name Category Name@Security intelligence Version$Engine VersionTEMP|
��F�ֹ>S�T���c���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��A�oData)K�NameStatus Code
A��O�oData7K�NameStatus Description
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��U�oData=K�NameCleaning Action Index
A��I�oData1K�NameCleaning Action
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
�����$�8�L�h��������������0�D�T�h�|��������(�<�\�|��� Product Name$Product Version Detection IDUnusedUnused2Status Code,Status DescriptionDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused3Unused40Cleaning Action Index$Cleaning ActionError Code(Error DescriptionUnused5Unused6 Severity Name Category Name@Security intelligence Version$Engine VersionTEMP����59��$S=
�O��4���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��;�oData#K�NameUnused13
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
�����,�@�T�h�|��������������,�<�P�d�x������������,�l� Product Name$Product VersionUnusedUnused2Unused3Unused4Unused5DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused6Unused7Unused8Unused9Unused10Unused11Unused12Unused13 Severity Name Category Name@Security intelligence Version$Engine VersionTEMP�l�2��z��Z�}yI�Qw����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
��������$�8�L�`�t�������������� �4�H�\�p������������H� Product Name$Product VersionError Code(Error DescriptionUnusedUnused2Unused3DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused4Unused5Unused6Unused7Unused8Unused9Unused10Unused11 Severity Name Category Name@Security intelligence Version$Engine VersionTEMP�0��59��$S=
�O��4���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��;�oData#K�NameUnused12
A��;�oData#K�NameUnused13
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
`���������������,�8�T�l���������������0�H�`�x������� Product Name$Product VersionUnusedUnused2Unused3Unused4Unused5DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused6Unused7Unused8Unused9Unused10Unused11Unused12Unused13 Severity Name Category Name@Security intelligence Version$Engine VersionTEMP���2��z��Z�}yI�Qw����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��3�oDataK�NamePath
A��9�oData!K�NameUnused4
A��9�oData!K�NameUnused5
A��9�oData!K�NameUnused6
A��9�oData!K�NameUnused7
A��9�oData!K�NameUnused8
A��9�oData!K�NameUnused9
A��;�oData#K�NameUnused10
A��;�oData#K�NameUnused11
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
(�H�l�����������8�P�l��������������$�<�T�t���� Product Name$Product VersionError Code(Error DescriptionUnusedUnused2Unused3DomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPathUnused4Unused5Unused6Unused7Unused8Unused9Unused10Unused11 Severity Name Category Name@Security intelligence Version$Engine VersionTEMP�

�K�4?y{�X�0���G3���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��=�oData%K�Name	Timestamp
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��9�oData!K�NameUnused4
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	������� 4H\l Product Name$Product VersionTimestampUnusedUnused2Unused3Unused4DomainUserSIDTEMP�

l��1��Z+������6���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��=�oData%K�Name	Timestamp
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	4Tx�����  Product Name$Product VersionTimestampError Code(Error DescriptionUnusedUnused2DomainUserSIDTEMP�%%l�ʾN̢�R�������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��W�oData?K�NameDetection Source Index
A��K�oData3K�NameDetection Source
A��7�oDataK�NameUnused
A��C�oData+K�NameProcess Name
A��7�oDataK�NameDomain
A��3�oDataK�NameUser
A��1�oDataK�NameSID
	A��A�oData)K�NameThreat Name
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameSeverity ID
A��A�oData)K�NameCategory ID

A��7�oDataK�NameFWLink
A��?�oData'K�Name
Path Found
A��W�oData?K�NameDetection Origin Index
A��K�oData3K�NameDetection Origin
A��W�oData?K�NameExecution Status Index
A��K�oData3K�NameExecution Status
A��S�oData;K�NameDetection Type Index
A��G�oData/K�NameDetection Type
A��9�oData!K�NameUnused2
A��9�oData!K�NameUnused3
A��E�oData-K�Name
Severity Name
A��E�oData-K�Name
Category Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
A��?�oData'K�Name
Process ID
A��[�oDataCK�NameSecurity intelligence ID
A��E�oData-K�Name
FidelityValue
A��E�oData-K�Name
FidelityLabel
A��I�oData1K�NameImage File Hash
 A��9�oData!K�NameUnused4
!A��9�oData!K�NameUnused5
"A��G�oData/K�NameTargetFileName
#A��G�oData/K�NameTargetFileHash
$Pp���$DXht�����Dl���0Dd���<\|���� Product Name$Product Version Detection ID4Detection Source Index(Detection SourceUnused Process NameDomainUserSIDThreat NameThreat IDSeverity IDCategory IDFWLinkPath Found4Detection Origin Index(Detection Origin4Execution Status Index(Execution Status0Detection Type Index$Detection TypeUnused2Unused3 Severity Name Category Name@Security intelligence Version$Engine VersionProcess ID8Security intelligence ID FidelityValue FidelityLabel$Image File HashUnused4Unused5$TargetFileName$TargetFileHashTEMP�**�$�)�{�4P�
�C39F���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��e�oDataMK�NameSecurity intelligence Version
(A��G�oData/K�NameEngine Version
)�'�'(,(P(d(x(�(�(�(�()$)8)T)�)�)�)�)�)**,*D*`*�*�*�*�*++4+H+d+�+�+�+�+0,X,l,�, Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6@Security intelligence Version$Engine VersionTEMP�**@9�)�{�4P�
�C39F���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��e�oDataMK�NameSecurity intelligence Version
(A��G�oData/K�NameEngine Version
)�<�<�<�<=$=8=P=l=�=�=�=�=�=>@>P>h>�>�>�>�>�>? ?@?d?x?�?�?�?�?@$@L@`@�@�@�@A,AlA Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6@Security intelligence Version$Engine VersionTEMP�**N�)�{�4P�
�C39F���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��e�oDataMK�NameSecurity intelligence Version
(A��G�oData/K�NameEngine Version
)HQhQ�Q�Q�Q�Q�QR,RHRhR�R�R�R�RSS(SDSdS�S�S�S�S�ST$T8TPT�T�T�T�T�TU UHUxU�U�U�U,V Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6@Security intelligence Version$Engine VersionTEMP�**�b�)�{�4P�
�C39F���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��e�oDataMK�NameSecurity intelligence Version
(A��G�oData/K�NameEngine Version
)f(fLflf�f�f�f�f�fg(gDgdgxg�g�g�g�gh$hHh\hlh�h�h�h�h�hi@iXiti�i�i�i�ij8jpj�j�j�j Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6@Security intelligence Version$Engine VersionTEMP��l_w�mHZV� ����1���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��S�oData;K�NameThreat resource path
A��7�oDataK�NameHashes
4mTmxm�m�m Product Name$Product VersionUnused0Threat resource pathHashesTEMP

�p� *�1n^������C!���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��/�oDataK�NameID
A��G�oData/K�NameDetection Time
A��3�oDataK�NameUser
A��3�oDataK�NamePath
A��C�oData+K�NameProcess Name
A��e�oDataMK�NameSecurity intelligence Version
A��G�oData/K�NameEngine Version
	�q�qrr rDrTrdr�r�r Product Name$Product VersionUnusedID$Detection TimeUserPath Process Name@Security intelligence Version$Engine VersionTEMP��w�R�[FuS��ɻʸ���|D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��/�oDataK�NameID
A��G�oData/K�NameDetection Time
A��3�oDataK�NameUser
A��3�oDataK�NamePath
A��C�oData+K�NameProcess Name
A��;�oData#K�NameRuleType
A��O�oData7K�NameTarget Commandline
	A��O�oData7K�NameParent Commandline
A��E�oData-K�Name
Involved File
A��M�oData5K�NameInhertiance Flags
A��e�oDataMK�NameSecurity intelligence Version

A��G�oData/K�NameEngine Version
�x�xyy(yLy\yly�y�y�y�yzDz�z Product Name$Product VersionUnusedID$Detection TimeUserPath Process NameRuleType,Target Commandline,Parent Commandline Involved File(Inhertiance Flags@Security intelligence Version$Engine VersionTEMP��|��WW��^V�M�k��D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��/�oDataK�NameID
A��G�oData/K�NameDetection Time
A��3�oDataK�NameUser
A��A�oData)K�NameDestination
A��C�oData+K�NameProcess Name
l}�}�}�}�}�}~ Product Name$Product VersionID$Detection TimeUserDestination Process NameTEMP�����W]�ޟo��+��2D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��/�oDataK�NameID
A��3�oDataK�NameUser
A��3�oDataK�NamePath
A��C�oData+K�NameProcess Name
A��E�oData-K�Name
Involved File
4�T�x���������؁ Product Name$Product VersionUnusedIDUserPath Process Name Involved FileTEMP܃�����^�p��q
����D�	EventDataA��C�oData+K�NameProduct Name
A��K�oData3K�NamePlatform version
A��7�oDataK�NameUnused
A��G�oData/K�NameEngine version
A��e�oDataMK�NameSecurity intelligence version
@�`������� Product Name(Platform versionUnused$Engine version@Security intelligence versionTEMP,X��˚�pX}T���n}��$	D�	EventDataA��C�oData+K�NameProduct Name
A��K�oData3K�NamePlatform version
A��7�oDataK�NameUnused
A��G�oData/K�NameEngine version
A��O�oData7K�NameNRI engine version
A��k�oDataSK�Name AV security intelligence version
A��k�oDataSK�Name AS security intelligence version
A��m�oDataUK�Name!NRI security intelligence version
A��=�oData%K�Name	RTP state
A��;�oData#K�NameOA state
	A��?�oData'K�Name
IOAV state
A��;�oData#K�NameBM state
A��m�oDataUK�Name!Last AV security intelligence age
A��m�oDataUK�Name!Last AS security intelligence age

A��Q�oData9K�NameLast quick scan age
A��O�oData7K�NameLast full scan age
A��w�oData_K�Name&AV security intelligence creation time
A��w�oData_K�Name&AS security intelligence creation time
A��_�oDataGK�NameLast quick scan start time
A��[�oDataCK�NameLast quick scan end time
A��W�oData?K�NameLast quick scan source
A��]�oDataEK�NameLast full scan start time
A��Y�oDataAK�NameLast full scan end time
A��U�oData=K�NameLast full scan source
A��G�oData/K�NameProduct status
L�l�����̐��@���Б���4�|�Ē��p�ē�8�l���ؔ� Product Name(Platform versionUnused$Engine version,NRI engine versionHAV security intelligence versionHAS security intelligence versionHNRI security intelligence versionRTP stateOA stateIOAV stateBM stateHLast AV security intelligence ageHLast AS security intelligence age,Last quick scan age,Last full scan ageTAV security intelligence creation timeTAS security intelligence creation time<Last quick scan start time8Last quick scan end time4Last quick scan source8Last full scan start time4Last full scan end time0Last full scan source$Product statusTEMP�**���)�{�4P�
�C39F���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameDetection ID
A��G�oData/K�NameDetection Time
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��=�oData%K�Name	Threat ID
A��A�oData)K�NameThreat Name
A��A�oData)K�NameSeverity ID
A��E�oData-K�Name
Severity Name
	A��A�oData)K�NameCategory ID
A��E�oData-K�Name
Category Name
A��7�oDataK�NameFWLink
A��A�oData)K�NameStatus Code

A��O�oData7K�NameStatus Description
A��5�oDataK�NameState
A��=�oData%K�Name	Source ID
A��A�oData)K�NameSource Name
A��C�oData+K�NameProcess Name
A��G�oData/K�NameDetection User
A��9�oData!K�NameUnused3
A��3�oDataK�NamePath
A��=�oData%K�Name	Origin ID
A��A�oData)K�NameOrigin Name
A��C�oData+K�NameExecution ID
A��G�oData/K�NameExecution Name
A��9�oData!K�NameType ID
A��=�oData%K�Name	Type Name
A��S�oData;K�NamePre Execution Status
A��=�oData%K�Name	Action ID
A��A�oData)K�NameAction Name
A��9�oData!K�NameUnused4
A��?�oData'K�Name
Error Code
 A��M�oData5K�NameError Description
!A��9�oData!K�NameUnused5
"A��M�oData5K�NamePost Clean Status
#A��U�oData=K�NameAdditional Actions ID
$A��]�oDataEK�NameAdditional Actions String
%A��K�oData3K�NameRemediation User
&A��9�oData!K�NameUnused6
'A��e�oDataMK�NameSecurity intelligence Version
(A��G�oData/K�NameEngine Version
)��(�H�l�������ȥ�� �@�T�p�����Ħ��$�8�H�`�|�����ԧ��4�P�d���������L�t���ȩ Product Name$Product Version Detection ID$Detection TimeUnusedUnused2Threat IDThreat NameSeverity ID Severity NameCategory ID Category NameFWLinkStatus Code,Status DescriptionStateSource IDSource Name Process Name$Detection UserUnused3PathOrigin IDOrigin Name Execution ID$Execution NameType IDType Name0Pre Execution StatusAction IDAction NameUnused4Error Code(Error DescriptionUnused5(Post Clean Status0Additional Actions ID8Additional Actions String(Remediation UserUnused6@Security intelligence Version$Engine VersionTEMP�<�U�J!��WU���:Z�K��D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameFeature Name
A��7�oDataK�NameReason
A��?�oData'K�Name
Error Code
A��M�oData5K�NameError Description
A��?�oData'K�Name
Feature ID
Ȭ��,�@�\��� Product Name$Product Version Feature NameReasonError Code(Error DescriptionFeature IDTEMP|ԯU�.WFi�].3<<_�]��D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameFeature Name
A��7�oDataK�NameReason
A��7�oDataK�NameUnused
A��9�oData!K�NameUnused2
A��?�oData'K�Name
Feature ID
`�����İذ�� Product Name$Product Version Feature NameReasonUnusedUnused2Feature IDTEMPT�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
,�L� Product Name$Product VersionTEMPTX�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
���� Product Name$Product VersionTEMP0ȵ�W�(.�T��;������D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameFeature Name
A��E�oData-K�Name
Configuration
A��7�oDataK�NameUnused
A��?�oData'K�Name
Feature ID
@�`�����Ķض Product Name$Product Version Feature Name ConfigurationUnusedFeature IDTEMP4d��D��Yd�_�jrl���<D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��=�oData%K�Name	Old Value
A��=�oData%K�Name	New Value
��Ը��� Product Name$Product VersionOld ValueNew ValueTEMP\@�:m; ���VJ�@�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��;�oData#K�NameResource
A��O�oData7K�NameFailure Type Index
A��C�oData+K�NameFailure Type
A��G�oData/K�NameException Code
��ػ���@�`� Product Name$Product VersionResource,Failure Type Index Failure Type$Exception CodeTEMPTl�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
���� Product Name$Product VersionTEMPT��<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
�� Product Name$Product VersionTEMPT�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
<�\� Product Name$Product VersionTEMPTh�<�+�p!Y�4p�N^���D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
���� Product Name$Product VersionTEMP�h���h�@hV]��*@%�C��`D�	EventDataA��?�oData'K�Name
hc_stateid
|�hc_stateidTEMP�

L�cr�(5�%X�;٠�����~D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��/�oDataK�NameID
A��5�oDataK�NameState
A��=�oData%K�Name	Timestamp
A��7�oDataK�NameAction
A��9�oData!K�NameProcess
A��7�oDataK�NameSource
A��7�oDataK�NameTarget
	A��3�oDataK�NameUser
A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
P�p���������������,�<�d� Product Name$Product VersionUnusedIDStateTimestampActionProcessSourceTargetUser(Signature Version$Engine VersionTEMP4��/8t���Uő�������:D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��C�oData+K�NameChanged Type
A��5�oDataK�NameValue
H�h����� Product Name$Product Version Changed TypeValueTEMP��FpSiC�V#v/M�o�����D�	EventDataA��C�oData+K�NameProduct Name
A��I�oData1K�NameProduct Version
A��7�oDataK�NameUnused
A��G�oData/K�NamePolicy Version
A��G�oData/K�NamePolicy Rule Id
A��M�oData5K�NameEnforcement Level
A��C�oData+K�NameAudit Reason
A��I�oData1K�NameEvent Timestamp
A��A�oData)K�NameAction Type
A��9�oData!K�NameProcess
	A��7�oDataK�NameSource
A��7�oDataK�NameTarget
A��?�oData'K�Name
Session Id
A��;�oData#K�NameUser Sid

A��M�oData5K�NameSignature Version
A��G�oData/K�NameEngine Version
���� �4�X�|���������,�@�\�t��� Product Name$Product VersionUnused$Policy Version$Policy Rule Id(Enforcement Level Audit Reason$Event TimestampAction TypeProcessSourceTargetSession IdUser Sid(Signature Version$Engine VersionPRVA\��Microsoft-Windows-Windows DefenderOPCOLEVL�PX�Pp�P��win:Errorwin:Warning(win:InformationalTASKKEYWEVNT
Ee@e��������~L������<�L������܊@������ԏL������̔L������ę4������ğ@������ �L������d�4��������L��������4������l�L�������4��������L������x4������,@��\�\�@��]�]��,L��^�^��AL��_�_�PV4��`�`�kL��a�a��r@��b�b��rL��c�c��m@��d�d��mL��e�e��zL��f�f��z@��g�g��m@��h�h��mL��i�i�,~L��k�k���L��l�l���L��m�m���L��n�n���L��~�~���L�����L������,�@������dL�������
4�������L�������4�������$4�������f@�������g4�������j@�������*L�������;L�������M4�������^L�������kL������Dm4������p@�������q4������<s4�����tL����w4�������4��������L�������L������p�L������ijL�������L������(�4��������L������ؽL������,�L��������L��������L�������a��0%���b�JK��W�1\�|n�6�*����WEVT_TEMPLATEMUIMUIen-USH!0�!7	*�H��
��!(0�!$10
	`�He0\
+�7�N0L0
+�70	���010
	`�He 6I�w���FSD�Y%=�ed��<��)�2x�2��
�0�0��3�,E�E�HD�0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
201215212914Z
211202212914Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
���M�H�o]�ԫp��D�՝և�6�*/^�bn��Pb�`"3��5L�� ����%�AC�%m�����YsaY2��)�p�0������y�	o��k�#7�|]�9O+�ĭ��m.�@�O��ˊ:H���@�!�]9��^L�
��e!*r�Q�m��g�n3����v�+��C�
z�~�[-~@�i7�P�ո�'=���rl"�,�^��ɢ6����&Q{����1��#l�&�\̎�":������0�~0U%0
+�7
+0U��h\��2��)B��Y*30TUM0K�I0G1-0+U$Microsoft Ireland Operations Limited10U
229879+4633440U#0��)9�ėx͐��O��|U�S0TUM0K0I�G�E�Chttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
�6�Ǻp��8���n�5%�KR]��U��n6�\�w�9
,���JX|f���m��O=3�g�x�5�4����L�E��5��޶�@�[���_�O>��S�O�\M�g�T�[�k
Dz+,�73��Z���7�m���J�L}(��|�VC�#���{g�6#�O�_z��ц<����]�겥~+���ڍo>��3=�j�a��{���B�T�x�Ҟ����㞼CI*
��f�gX��\\��0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1��0��0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113�,E�E�HD�0
	`�He��0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" ��K(R[�N�n��W�8׋}�İ��c[�GeŚ0<
+�7
1.,60UsvxkDKMJ0TZ83vZPSZleqBhY3/D+LlcqzogryHDY=0Z
+�71L0J�$�"Microsoft Windows�"� http://www.microsoft.com/windows0
	*�H��
�`,�+�S�X��<������
�V�T�,lu	y!��6���J.-��󥪹d���;���]�?���'�΋{u�=.{EW]#�1&� L���;R�@���s�/\GAۙ�HX��dQv����b�
<c^��@�-u�cu��ˤ wB�㭼�q��?&ڌ�x!�~j�Xy�m���f�22�o��_�͆Ѷ���Ao�e���A	Sl3�G`a�(�3z��}����ȉ��z!�ū~����qF���0��
+�71��0��	*�H��
���0��10
	`�He0�U*�H��
	��D�@0�<
+�Y
010
	`�He �җ؋�+����0�wn�~_4PSx���tń�`��ؑ520210508012516.622Z0��Ԥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1&0$UThales TSS ESN:F77F-E356-5BAE1%0#UMicrosoft Time-Stamp Service��D0��0�ݠ3^�)�_���^0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
210114190219Z
220411190219Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1&0$UThales TSS ESN:F77F-E356-5BAE1%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
���#��z���v��zX������쬷��6�y��_�˃��L��+��~�j��n�O��	%�^�a�Ɣ���\���;��,lm��������2��@VP�q�z#�5+\�]g���:�X!����AG��]b𥝕�e�4z@�b(.������ج�����u$_��XK�ƶU7xh� DR;PCJ�8���|�fu������IM�Ҕ�Q�p�gB��+2*��~��<��.��Q���0���0�0U�r|�
�K�T���Tx�+0U#0��c:\�1��C{|F�3hZ�mU0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0U�00U%0
+0
	*�H��
�!�Y��$ʑ�y�X����*���'U�HtȽSƯK�dO﮲?@�Z.�
¦����x��fNf�=���Oj�n{�-�t�)7=��&ܶ�x�s�g�
x(h��$���YG�8�3L6h��=���9���<(�
�]r���~Z�3j��&��g��ҟ�'#�&�4�����\[�˽��nl�-u,N����?�Za���åk�(�#�#!�?��}������]��Yi�.�I�m��G�J�Êf0�q0�Y�
a	�*0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
��
�w�: ����i�ktTե
����|hK,_���a�v�>f+[�S'1A��	�|a0Y�0D�`��TC�M�8�Bݓ��s0W&��E
��G�Ϳ$`2X`F�XG�2�tag�_�T�ϓL��Ħ]�an(������a�F�'$gr!��Kd�Pb�]�w=�Wu���BM@Q��>g�f��D~��K�n�ʱ��z*
1��N���5�x���<�/D����d��� 	�x����D]^�O"M���0��0	+�70U�c:\�1��C{|F�3hZ�mU0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��U ���0��0��	+�7.0��0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0
	*�H��
��Q
���?�q=���!o���1����Wm0���f�j���x�Ǩ�%��kTW+Q�D��S���`�v�@@A��\�\�^5�$VKt�Bȯ���7}Z?�yJ�R�8�/y�e٩�k����zoK0D$"<�����Y)����p�2J'�U�/���3�b_��W@��Ιf���jb��J�&�9�Jqc�{!mÜ��<�}�j�x�m���8ؔ�ƥ
������B�����"8 �%�d��~cY%z.9Wv�q����a�˚�G����ͧ��}���;q	�]t�"aڰPo�����1��:�eGx�H���r~akow��˧	�9����؂�r�����*T9�[��
U�z�s;�-��3.)��/T'!�ȬN�(���ۖ��B���AM�*��f0ӻt2K�c{���/�!�Y���D<�Pqס��U�i�W���0����M�
�]O�8/��X.�
�P5��	'ճ~5��6��_��t�I���0�;0����Ԥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1)0'U Microsoft Operations Puerto Rico1&0$UThales TSS ESN:F77F-E356-5BAE1%0#UMicrosoft Time-Stamp Service�#
0+VI�W�!eT�6�}�ݝ�c*���0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
�@A�0"20210508024541Z20210509024541Z0w0=
+�Y
1/0-0
�@A�0
��0P0
�A�06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
���e1Nl�0s�+�2�&���q�0k�&��zo?w��9��:��ۅ@�}Vh�Բe�6�KY�?9L�տ;8o8k�yr�KS)	�G���:��e�����B�2j��'��"Kk�	%zt��s�S1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103^�)�_���^0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" �6�oa~�敞+F_�}%�SĆ,�-~;�^���0��*�H��
	/1��0��0��0�� ~��ԗ��~�dL�d3�k��!^w�^�����0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103^�)�_���^0" �R��O&��̻a�u��vx0`V1�~���
N0
	*�H��
��rh�V�C]���N�tI��j�ܹ���B��6�|���/��&q�Yt�۠�ڋS�<�]0$�s���#�/��M?�M�pXo�7�l��\,̦�c˷�f"	����ln�y�l����_����[k��s����%�*�ȾĤ���9p2�`�=k�{<�KVS��y(�[q�r_^�O"�c��@����0a�l\����ÂY�5�>>������'�nu��_��m-��M�����Xy
h��,H�	릡��k~