MZ@ !L!This program cannot be run in DOS mode. $uEEELlDLl DRichEPEdm[J"  @@.rsrc@@(@Xp     WEVT_TEMPLATEMUI4VS_VERSION_INFO@@?StringFileInfo040904B0LCompanyNameMicrosoft CorporationTFileDescriptionEvent Resource Modulel&FileVersion6.1.7600.16385 (win7_rtm.090713-1255)8 InternalNameMpEvMsg.dll.LegalCopyright Microsoft Corporation. All rights reserved.@ OriginalFilenameMpEvMsg.dllj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.1.7600.16385DVarFileInfo$Translation CRIMN_߽,x$WEVTpDPܼCHANdMicrosoft-Windows-Windows Defender/OperationalTMicrosoft-Windows-Windows Defender/WHCTTBLԺ TEMP k~cd^{D EventDataACoData+KName Product Name AIoData1KNameProduct Version A]oDataEKNameCurrent Signature Version A_oDataGKNamePrevious Signature Version AQoData9KNameUpdate Source Index AEoData-KName Update Source A7oDataKNameUnused A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID ASoData;KNameSignature Type Index AGoData/KNameSignature Type AMoData5KNameUpdate Type Index AAoData)KName Update Type AWoData?KNameCurrent Engine Version AYoDataAKNamePrevious Engine Version $H  0 @ L |     Product Name$Product Version8Current Signature Version<Previous Signature Version,Update Source Index Update SourceUnusedDomainUser SID0Signature Type Index$Signature Type(Update Type IndexUpdate Type4Current Engine Version4Previous Engine VersionTEMP ,"?#BD EventDataACoData+KName Product Name AIoData1KNameProduct Version A]oDataEKNameCurrent Signature Version A_oDataGKNamePrevious Signature Version AQoData9KNameUpdate Source Index AEoData-KName Update Source A7oDataKNameUnused A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID ASoData;KNameSignature Type Index AGoData/KNameSignature Type AMoData5KNameUpdate Type Index AAoData)KName Update Type AWoData?KNameCurrent Engine Version AYoDataAKNamePrevious Engine Version A?oData'KName Error Code AMoData5KNameError Description Lx 0Xt Product Name$Product Version8Current Signature Version<Previous Signature Version,Update Source Index Update SourceUnusedDomainUser SID0Signature Type Index$Signature Type(Update Type IndexUpdate Type4Current Engine Version4Previous Engine VersionError Code(Error DescriptionTEMP< X]9]fZ~l|D EventDataACoData+KName Product Name AIoData1KNameProduct Version AWoData?KNameCurrent Engine Version AYoDataAKNamePrevious Engine Version AQoData9KNameUpdate Source Index AEoData-KName Update Source A7oDataKNameUnused A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID  @d,@P Product Name$Product Version4Current Engine Version4Previous Engine Version,Update Source Index Update SourceUnusedDomainUser SIDTEMPD 0O~r]_QYDD EventDataACoData+KName Product Name AIoData1KNameProduct Version AWoData?KNameCurrent Engine Version AYoDataAKNamePrevious Engine Version AQoData9KNameUpdate Source Index AEoData-KName Update Source A7oDataKNameUnused A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID A?oData'KName Error Code AMoData5KNameError Description  @d,@P\x Product Name$Product Version4Current Engine Version4Previous Engine Version,Update Source Index Update SourceUnusedDomainUser SIDError Code(Error DescriptionTEMP $#\&^cND EventDataACoData+KName Product Name AIoData1KNameProduct Version A_oDataGKNameSignatures Attempted Index ASoData;KNameSignatures Attempted A?oData'KName Error Code AMoData5KNameError Description A7oDataKNameUnused A9oData!KNameUnused2 A]oDataEKNameLoading signature version AWoData?KNameLoading engine version # $0$l$$$$$%@% Product Name$Product Version<Signatures Attempted Index0Signatures AttemptedError Code(Error DescriptionUnusedUnused28Loading signature version4Loading engine versionTEMP (6Sܴ8ɦ2^2D EventDataACoData+KName Product Name AIoData1KNameProduct Version A9oData!KNameScan ID AIoData1KNameScan Type Index A=oData%KName Scan Type AUoData=KNameScan Parameters Index AIoData1KNameScan Parameters A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AGoData/KNameScan Resources )))*4*L*|***** Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUser SID$Scan ResourcesTEMP /"Ȃ~6vgD EventDataACoData+KName Product Name AIoData1KNameProduct Version A9oData!KNameScan ID AIoData1KNameScan Type Index A=oData%KName Scan Type AUoData=KNameScan Parameters Index AIoData1KNameScan Parameters A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AIoData1KNameScan Time Hours AMoData5KNameScan Time Minutes AMoData5KNameScan Time Seconds 0(0L0`0000011 1D1l1 Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUser SID$Scan Time Hours(Scan Time Minutes(Scan Time SecondsTEMP 4 1-=xD EventDataACoData+KName Product Name AIoData1KNameProduct Version A9oData!KNameScan ID AIoData1KNameScan Type Index A=oData%KName Scan Type AUoData=KNameScan Parameters Index AIoData1KNameScan Parameters A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID t55555686\6p66 Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUser SIDTEMP 9 1-=xD EventDataACoData+KName Product Name AIoData1KNameProduct Version A9oData!KNameScan ID AIoData1KNameScan Type Index A=oData%KName Scan Type AUoData=KNameScan Parameters Index AIoData1KNameScan Parameters A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID l:::::;0;T;h;x; Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUser SIDTEMP > 1-=xD EventDataACoData+KName Product Name AIoData1KNameProduct Version A9oData!KNameScan ID AIoData1KNameScan Type Index A=oData%KName Scan Type AUoData=KNameScan Parameters Index AIoData1KNameScan Parameters A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID d??????(@L@`@p@ Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUser SIDTEMP 0DyEŝ 7d~D EventDataACoData+KName Product Name AIoData1KNameProduct Version A9oData!KNameScan ID AIoData1KNameScan Type Index A=oData%KName Scan Type AUoData=KNameScan Parameters Index AIoData1KNameScan Parameters A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID A?oData'KName Error Code AMoData5KNameError Description  E@EdExEEEEFF,F8FTF Product Name$Product VersionScan ID$Scan Type IndexScan Type0Scan Parameters Index$Scan ParametersDomainUser SIDError Code(Error DescriptionTEMP (NsiݸS; vD EventDataACoData+KName Product Name AIoData1KNameProduct Version ACoData+KName Detection ID AWoData?KNameDetection Source Index AKoData3KNameDetection Source A7oDataKNameUnused ACoData+KName Process Name A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A?oData'KName Path Found A9oData!KNameUnused2 A9oData!KNameUnused3 AWoData?KNameExecution Status Index AKoData3KNameExecution Status ASoData;KNameDetection Type Index AGoData/KNameDetection Type A9oData!KNameUnused4 A9oData!KNameUnused5 AEoData-KName Severity Name AEoData-KName Category Name 0PPPtPPPPQ$Q8QHQTQpQQQQQQRRLRtRRRRRS Product Name$Product Version Detection ID4Detection Source Index(Detection SourceUnused Process NameDomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkPath FoundUnused2Unused34Execution Status Index(Execution Status0Detection Type Index$Detection TypeUnused4Unused5 Severity Name Category NameTEMP Z[ (K\ ̖_(D EventDataACoData+KName Product Name AIoData1KNameProduct Version ACoData+KName Detection ID A7oDataKNameUnused A9oData!KNameUnused2 AAoData)KName Status Code AOoData7KNameStatus Description A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A9oData!KNameUnused3 A9oData!KNameUnused4 A9oData!KNameUnused5 AUoData=KNameCleaning Action Index AIoData1KNameCleaning Action A9oData!KNameUnused6 A9oData!KNameUnused7 A9oData!KNameUnused8 A9oData!KNameUnused9 AEoData-KName Severity Name AEoData-KName Category Name \\\\ ] ]<]h]|]]]]]]^^,^@^T^^^^^^^_ Product Name$Product Version Detection IDUnusedUnused2Status Code,Status DescriptionDomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkUnused3Unused4Unused50Cleaning Action Index$Cleaning ActionUnused6Unused7Unused8Unused9 Severity Name Category NameTEMPL f 1&vxdEHD EventDataACoData+KName Product Name AIoData1KNameProduct Version ACoData+KName Detection ID A7oDataKNameUnused A9oData!KNameUnused2 AAoData)KName Status Code AOoData7KNameStatus Description A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A?oData'KName Path Found A9oData!KNameUnused3 A9oData!KNameUnused4 AUoData=KNameCleaning Action Index AIoData1KNameCleaning Action A?oData'KName Error Code AMoData5KNameError Description A9oData!KNameUnused5 A9oData!KNameUnused6 AEoData-KName Severity Name AEoData-KName Category Name hhi i4iHidiiiiiiij,j@j\jpjjjjjk0kDkdk Product Name$Product Version Detection IDUnusedUnused2Status Code,Status DescriptionDomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkPath FoundUnused3Unused40Cleaning Action Index$Cleaning ActionError Code(Error DescriptionUnused5Unused6 Severity Name Category NameTEMP| r5_|" D EventDataACoData+KName Product Name AIoData1KNameProduct Version A7oDataKNameUnused A9oData!KNameUnused2 A9oData!KNameUnused3 A9oData!KNameUnused4 A9oData!KNameUnused5 A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A9oData!KNameUnused6 A9oData!KNameUnused7 A9oData!KNameUnused8 A9oData!KNameUnused9 A;oData#KNameUnused10 A;oData#KNameUnused11 A;oData#KNameUnused12 A;oData#KNameUnused13 A;oData#KNameUnused14 AEoData-KName Severity Name AEoData-KName Category Name tttt u u4uHu\uluxuuuuuu v v4vHv`vxvvvvv Product Name$Product VersionUnusedUnused2Unused3Unused4Unused5DomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkUnused6Unused7Unused8Unused9Unused10Unused11Unused12Unused13Unused14 Severity Name Category NameTEMP (~>zy:}"yD EventDataACoData+KName Product Name AIoData1KNameProduct Version A?oData'KName Error Code AMoData5KNameError Description A7oDataKNameUnused A9oData!KNameUnused2 A9oData!KNameUnused3 A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A9oData!KNameUnused4 A9oData!KNameUnused5 A9oData!KNameUnused6 A9oData!KNameUnused7 A9oData!KNameUnused8 A9oData!KNameUnused9 A;oData#KNameUnused10 A;oData#KNameUnused11 A;oData#KNameUnused12 AEoData-KName Severity Name AEoData-KName Category Name 0Pt̀$@Xt́4Ld Product Name$Product VersionError Code(Error DescriptionUnusedUnused2Unused3DomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkUnused4Unused5Unused6Unused7Unused8Unused9Unused10Unused11Unused12 Severity Name Category NameTEMP| 5_|" D EventDataACoData+KName Product Name AIoData1KNameProduct Version A7oDataKNameUnused A9oData!KNameUnused2 A9oData!KNameUnused3 A9oData!KNameUnused4 A9oData!KNameUnused5 A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A9oData!KNameUnused6 A9oData!KNameUnused7 A9oData!KNameUnused8 A9oData!KNameUnused9 A;oData#KNameUnused10 A;oData#KNameUnused11 A;oData#KNameUnused12 A;oData#KNameUnused13 A;oData#KNameUnused14 AEoData-KName Severity Name AEoData-KName Category Name ,@Th|̌,@Thȍ Product Name$Product VersionUnusedUnused2Unused3Unused4Unused5DomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkUnused6Unused7Unused8Unused9Unused10Unused11Unused12Unused13Unused14 Severity Name Category NameTEMP H>zy:}"yD EventDataACoData+KName Product Name AIoData1KNameProduct Version A?oData'KName Error Code AMoData5KNameError Description A7oDataKNameUnused A9oData!KNameUnused2 A9oData!KNameUnused3 A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID AAoData)KName Threat Name A=oData%KName Threat ID AAoData)KName Severity ID AAoData)KName Category ID A7oDataKNameFWLink A9oData!KNameUnused4 A9oData!KNameUnused5 A9oData!KNameUnused6 A9oData!KNameUnused7 A9oData!KNameUnused8 A9oData!KNameUnused9 A;oData#KNameUnused10 A;oData#KNameUnused11 A;oData#KNameUnused12 AEoData-KName Severity Name AEoData-KName Category Name Ppؗ(8D`xĘؘ(<Tl Product Name$Product VersionError Code(Error DescriptionUnusedUnused2Unused3DomainUser SIDThreat NameThreat IDSeverity IDCategory IDFWLinkUnused4Unused5Unused6Unused7Unused8Unused9Unused10Unused11Unused12 Severity Name Category NameTEMP  `m+ʞD EventDataACoData+KName Product Name AIoData1KNameProduct Version A=oData%KName Timestamp A7oDataKNameUnused A9oData!KNameUnused2 A9oData!KNameUnused3 A9oData!KNameUnused4 A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID hĝ؝(8 Product Name$Product VersionTimestampUnusedUnused2Unused3Unused4DomainUser SIDTEMP 8Uj(6#$D EventDataACoData+KName Product Name AIoData1KNameProduct Version A=oData%KName Timestamp A?oData'KName Error Code AMoData5KNameError Description A7oDataKNameUnused A9oData!KNameUnused2 A7oDataKNameDomain A3oDataKNameUser A1oDataKNameSID  D\xȢܢ Product Name$Product VersionTimestampError Code(Error DescriptionUnusedUnused2DomainUser SIDTEMPHD{]ahpD EventDataACoData+KName Product Name AIoData1KNameProduct Version ACoData+KName Feature Name A7oDataKNameReason A?oData'KName Error Code AMoData5KNameError Description A?oData'KName Feature ID ԥ8Lh Product Name$Product Version Feature NameReasonError Code(Error DescriptionFeature IDTEMP|k`>7"tD EventDataACoData+KName Product Name AIoData1KNameProduct Version ACoData+KName Feature Name A7oDataKNameReason A7oDataKNameUnused A9oData!KNameUnused2 A?oData'KName Feature ID lЩ Product Name$Product Version Feature NameReasonUnusedUnused2Feature IDTEMPT"uW5D EventDataACoData+KName Product Name AIoData1KNameProduct Version 8X Product Name$Product VersionTEMPTd"uW5D EventDataACoData+KName Product Name AIoData1KNameProduct Version  Product Name$Product VersionTEMP0Ԯ=!W~7 _LD EventDataACoData+KName Product Name AIoData1KNameProduct Version ACoData+KName Feature Name AEoData-KName Configuration A7oDataKNameUnused A?oData'KName Feature ID LlЯ Product Name$Product Version Feature Name ConfigurationUnusedFeature IDTEMP4p-5cw<D EventDataACoData+KName Product Name AIoData1KNameProduct Version A=oData%KName Old Value A=oData%KName New Value  Product Name$Product VersionOld ValueNew ValueTEMPqjPo V@D EventDataACoData+KName Product Name AIoData1KNameProduct Version A;oData#KNameResource AOoData7KNameFailure Type Index ACoData+KName Failure Type AGoData/KNameException Code AUoData=KNameException Description 4Txܵ Product Name$Product VersionResource,Failure Type Index Failure Type$Exception Code0Exception DescriptionTEMPT"uW5D EventDataACoData+KName Product Name AIoData1KNameProduct Version @` Product Name$Product VersionTEMPTl"uW5D EventDataACoData+KName Product Name AIoData1KNameProduct Version  Product Name$Product VersionTEMPT"uW5D EventDataACoData+KName Product Name AIoData1KNameProduct Version  Product Name$Product VersionTEMPT"uW5D EventDataACoData+KName Product Name AIoData1KNameProduct Version <\ Product Name$Product VersionTEMPFgiw`,|{q~`D EventDataA?oData'KName hc_stateid (hc_stateidOPCOLEVLPPPwin:Errorwin:Warning(win:InformationalTASKKEYWEVNT e@et%t*t1h6t;t|@\|Fh0St8_\ktw\t \ętD\|tL \ t\\\  \  t(t|tЬtt4\0ttظt,t G͇t6* WEVT_TEMPLATEMUIMUI en-US