Created
October 18, 2017 21:59
-
-
Save mattifestation/010b44ce97cf70bb7edab32ffcc0649c to your computer and use it in GitHub Desktop.
Recovered Windows Defender Application Guard Hyper-V Container Code Integrity Policy
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0"?> | |
| <SiPolicy xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="urn:schemas-microsoft-com:sipolicy"> | |
| <VersionEx>10.0.0.0</VersionEx> | |
| <PolicyTypeID>{A244370E-44C9-4C06-B551-F6016E563076}</PolicyTypeID> | |
| <PlatformID>{2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}</PlatformID> | |
| <Rules> | |
| <Rule> | |
| <Option>Enabled:UMCI</Option> | |
| </Rule> | |
| <Rule> | |
| <Option>Enabled:Unsigned System Integrity Policy</Option> | |
| </Rule> | |
| <Rule> | |
| <Option>Enabled:Advanced Boot Options Menu</Option> | |
| </Rule> | |
| <Rule> | |
| <Option>Required:Enforce Store Applications</Option> | |
| </Rule> | |
| </Rules> | |
| <EKUs> | |
| <EKU ID="ID_EKU_E_0001" Value="060A2B0601040182370A0306" FriendlyName="Windows System Component Verification" /> | |
| <EKU ID="ID_EKU_E_0002" Value="060A2B0601040182370A0305" FriendlyName="Windows Hardware Driver Verification" /> | |
| <EKU ID="ID_EKU_E_0003" Value="060A2B0601040182373D0401" FriendlyName="Early Launch Antimalware Driver" /> | |
| <EKU ID="ID_EKU_E_0004" Value="060A2B0601040182373D0501" FriendlyName="HAL Extension" /> | |
| <EKU ID="ID_EKU_E_0005" Value="060A2B0601040182370A0315" FriendlyName="Windows RT Verification" /> | |
| <EKU ID="ID_EKU_E_0006" Value="060A2B0601040182374C0301" FriendlyName="Windows Store" /> | |
| <EKU ID="ID_EKU_E_0007" Value="060A2B0601040182374C0501" FriendlyName="Dynamic Code Generator" /> | |
| <EKU ID="ID_EKU_E_0008" Value="060A2B0601040182374C0B01" FriendlyName="1.3.6.1.4.1.311.76.11.1" /> | |
| <EKU ID="ID_EKU_E_0009" Value="060A2B0601040182370A0324" FriendlyName="1.3.6.1.4.1.311.10.3.36" /> | |
| </EKUs> | |
| <FileRules> | |
| <Deny ID="ID_DENY_D_0001" FileName="AT.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0002" FileName="bash.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0003" FileName="BitLockerWizard.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0004" FileName="BitLockerWizardElev.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0005" FileName="Bubbles" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0006" FileName="calc.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0007" FileName="CDB.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0008" FileName="CertUtil.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0009" FileName="charmap.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_000A" FileName="CLEANMGR.DLL" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_000B" FileName="ClientConsole.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_000C" FileName="cmd.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_000D" FileName="CMDL32.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_000E" FileName="colorcpl.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_000F" FileName="ComputerDefaults.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0010" FileName="CONTROL.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0011" FileName="Credwiz.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0012" FileName="CryptExt.dll" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0013" FileName="Csc.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0014" FileName="cscript.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0015" FileName="csi.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0016" FileName="dccw.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0017" FileName="DeviceEject.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0018" FileName="DeviceParing.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0019" FileName="DeviceParing.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_001A" FileName="DeviceProperties.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_001B" FileName="dfshim.dll" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_001C" FileName="DIALER.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_001D" FileName="DISKPERF.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_001E" FileName="dnx.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_001F" FileName="DOSKEY.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0020" FileName="dsquery.dll" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0021" FileName="dvdplay" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0022" FileName="eventvwr.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0023" FileName="expand" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0024" FileName="FC.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0025" FileName="FIND.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0026" FileName="FINDSTR.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0027" FileName="finger.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0028" FileName="FONTVIEW.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0029" FileName="forfiles.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_002A" FileName="format.com" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_002B" FileName="fsi.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_002C" FileName="FXSSVC.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_002D" FileName="gprslt.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_002E" FileName="GPSCRIPT.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_002F" FileName="GPUpdate.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0030" FileName="Help.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0031" FileName="HH.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0032" FileName="HWRREG.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0033" FileName="iexplore.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0034" FileName="ipconfig.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0035" FileName="irftp.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0036" FileName="iscsicli.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0037" FileName="iscsicpl.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0038" FileName="ISOBURN.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0039" FileName="Journal.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_003A" FileName="kd.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_003B" FileName="LaunchTM.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_003C" FileName="manage-bde.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_003D" FileName="mip.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_003E" FileName="mmc.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_003F" FileName="mobsync.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0040" FileName="MORE.COM" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0041" FileName="MSBuild.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0042" FileName="msconfig.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0043" FileName="msdt.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0044" FileName="mshta.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0045" FileName="msiexec.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0046" FileName="mspaint.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0047" FileName="msra.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0048" FileName="MSRATING.DLL" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0049" FileName="mstsc.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_004A" FileName="Mystify" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_004B" FileName="nbtinfo.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_004C" FileName="NETPLWIZ.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_004D" FileName="netsh.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_004E" FileName="netstat.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_004F" FileName="notepad.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0050" FileName="nslookup.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0051" FileName="ntprint.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0052" FileName="ntsd.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0053" FileName="odbcad32.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0054" FileName="odbcconf.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0055" FileName="OpenWith.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0056" FileName="OptionalFeatures.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0057" FileName="pcalua.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0058" FileName="pcaui.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0059" FileName="pcwrun.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_005A" FileName="phoneactivate.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_005B" FileName="PhotoScreensaver.scr.mui" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_005C" FileName="PhotoViewer.dll" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_005D" FileName="ping.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_005E" FileName="PnPutil.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_005F" FileName="PowerCfg.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0060" FileName="powershell.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0061" FileName="powershell_ise.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0062" FileName="PresentationHost.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0063" FileName="Print.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0064" FileName="PrintBrmUi.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0065" FileName="printui.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0066" FileName="proquota.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0067" FileName="psr.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0068" FileName="Pwcreator.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0069" FileName="Pwlauncher.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_006A" FileName="qappsrv.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_006B" FileName="qprocess.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_006C" FileName="query.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_006D" FileName="quser.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_006E" FileName="qwinsta.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_006F" FileName="RASDIAL.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0070" FileName="rasdlui.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0071" FileName="raserver.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0072" FileName="rasphone.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0073" FileName="rcsi.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0074" FileName="reg.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0075" FileName="regedit.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0076" FileName="regedt32.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0077" FileName="REPLACE.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0078" FileName="reset.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0079" FileName="resmon.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_007A" FileName="Ribbons" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_007B" FileName="robocopy.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_007C" FileName="route.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_007D" FileName="RpcPing.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_007E" FileName="rrinstaller.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_007F" FileName="RUNAS.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0080" FileName="RunLegacyCPLElevated.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0081" FileName="RUNONCE.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0082" FileName="sc.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0083" FileName="schtasks.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0084" FileName="ScriptRunner.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0085" FileName="scrnsave" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0086" FileName="sdbinst.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0087" FileName="sdchange.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0088" FileName="sdclt.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0089" FileName="SessionMsg.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_008A" FileName="shrpubw.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_008B" FileName="SndVol.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_008C" FileName="SnippingTool.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_008D" FileName="SpaceAgent.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_008E" FileName="SSystemPropertiesProtection.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_008F" FileName="StikyNot.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0090" FileName="SystemPropertiesAdvanced.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0091" FileName="SystemPropertiesComputerName.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0092" FileName="SystemPropertiesDataExecutionPrevention.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0093" FileName="SystemPropertiesHardware.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0094" FileName="SystemPropertiesPerformance.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0095" FileName="SystemPropertiesRemote.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0096" FileName="Taskmgr.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0097" FileName="TCMSETUP.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0098" FileName="Text3D" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_0099" FileName="unregmp2.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_009A" FileName="WAB.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_009B" FileName="wbemtest.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_009C" FileName="WIAACMGR.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_009D" FileName="windbg.Exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_009E" FileName="WINHLP32.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_009F" FileName="WinSAT.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A0" FileName="wksprt.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A1" FileName="WmiApSrv.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A2" FileName="wmic.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A3" FileName="wmicookr.dll" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A4" FileName="wmplayer.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A5" FileName="WorkFolders.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A6" FileName="WpcMon.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A7" FileName="wpr.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A8" FileName="write" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00A9" FileName="wscript.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00AA" FileName="XCOPY.EXE" MinimumFileVersion="65535.65535.65535.65535" /> | |
| <Deny ID="ID_DENY_D_00AB" FileName="xpsrchvw.exe" MinimumFileVersion="65535.65535.65535.65535" /> | |
| </FileRules> | |
| <Signers> | |
| <Signer Name="Signer 1" ID="ID_SIGNER_S_0001"> | |
| <CertRoot Type="Wellknown" Value="0A" /> | |
| </Signer> | |
| <Signer Name="Signer 2" ID="ID_SIGNER_S_0002"> | |
| <CertRoot Type="TBS" Value="121AF4B922A74247EA49DF50DE37609CC1451A1FE06B2CB7E1E079B492BD8195" /> | |
| </Signer> | |
| <Signer Name="Signer 3" ID="ID_SIGNER_S_0003"> | |
| <CertRoot Type="Wellknown" Value="0C" /> | |
| </Signer> | |
| <Signer Name="Signer 4" ID="ID_SIGNER_S_0004"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0007" /> | |
| </Signer> | |
| <Signer Name="Signer 5" ID="ID_SIGNER_S_0005"> | |
| <CertRoot Type="Wellknown" Value="07" /> | |
| <CertEKU ID="ID_EKU_E_0008" /> | |
| </Signer> | |
| <Signer Name="Signer 6" ID="ID_SIGNER_S_0006"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0001" /> | |
| </Signer> | |
| <Signer Name="Signer 7" ID="ID_SIGNER_S_0007"> | |
| <CertRoot Type="TBS" Value="4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146" /> | |
| <CertEKU ID="ID_EKU_E_0001" /> | |
| </Signer> | |
| <Signer Name="Signer 8" ID="ID_SIGNER_S_0008"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0003" /> | |
| </Signer> | |
| <Signer Name="Signer 9" ID="ID_SIGNER_S_0009"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0004" /> | |
| </Signer> | |
| <Signer Name="Signer 10" ID="ID_SIGNER_S_000A"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0002" /> | |
| </Signer> | |
| <Signer Name="Signer 11" ID="ID_SIGNER_S_000B"> | |
| <CertRoot Type="Wellknown" Value="05" /> | |
| <CertEKU ID="ID_EKU_E_0002" /> | |
| </Signer> | |
| <Signer Name="Signer 12" ID="ID_SIGNER_S_000C"> | |
| <CertRoot Type="Wellknown" Value="04" /> | |
| <CertEKU ID="ID_EKU_E_0002" /> | |
| </Signer> | |
| <Signer Name="Signer 13" ID="ID_SIGNER_S_000D"> | |
| <CertRoot Type="Wellknown" Value="0E" /> | |
| <CertEKU ID="ID_EKU_E_0001" /> | |
| </Signer> | |
| <Signer Name="Signer 14" ID="ID_SIGNER_S_000E"> | |
| <CertRoot Type="Wellknown" Value="0E" /> | |
| <CertEKU ID="ID_EKU_E_0003" /> | |
| </Signer> | |
| <Signer Name="Signer 15" ID="ID_SIGNER_S_000F"> | |
| <CertRoot Type="Wellknown" Value="0E" /> | |
| <CertEKU ID="ID_EKU_E_0004" /> | |
| </Signer> | |
| <Signer Name="Signer 16" ID="ID_SIGNER_S_0010"> | |
| <CertRoot Type="Wellknown" Value="0E" /> | |
| <CertEKU ID="ID_EKU_E_0002" /> | |
| </Signer> | |
| <Signer Name="Signer 17" ID="ID_SIGNER_S_0011"> | |
| <CertRoot Type="TBS" Value="FC9EDE3DCCA09186B2D3BF9B738A2050CB1A554DA2DCADB55F3F72EE17721378" /> | |
| <CertEKU ID="ID_EKU_E_0006" /> | |
| </Signer> | |
| <Signer Name="Signer 18" ID="ID_SIGNER_S_0012"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0005" /> | |
| </Signer> | |
| <Signer Name="Signer 19" ID="ID_SIGNER_S_0013"> | |
| <CertRoot Type="Wellknown" Value="0E" /> | |
| <CertEKU ID="ID_EKU_E_0005" /> | |
| </Signer> | |
| <Signer Name="Signer 20" ID="ID_SIGNER_S_0014"> | |
| <CertRoot Type="Wellknown" Value="07" /> | |
| <CertEKU ID="ID_EKU_E_0005" /> | |
| </Signer> | |
| <Signer Name="Signer 21" ID="ID_SIGNER_S_0015"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0001" /> | |
| <CertPublisher Value="Microsoft Windows" /> | |
| </Signer> | |
| <Signer Name="Signer 22" ID="ID_SIGNER_S_0016"> | |
| <CertRoot Type="Wellknown" Value="06" /> | |
| <CertEKU ID="ID_EKU_E_0009" /> | |
| <CertPublisher Value="Microsoft Windows" /> | |
| </Signer> | |
| <Signer Name="Signer 23" ID="ID_SIGNER_S_0017"> | |
| <CertRoot Type="TBS" Value="068D49F5D48557C8F705BB066B9EC6C8AC82FF62F1B5E2E96AD4165501815181" /> | |
| </Signer> | |
| </Signers> | |
| <SigningScenarios> | |
| <SigningScenario ID="ID_SIGNINGSCENARIO_DRIVERS_1" Value="131"> | |
| <ProductSigners> | |
| <AllowedSigners> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0006" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0008" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0009" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000A" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000B" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000C" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000D" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000E" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000F" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0010" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0001" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0002" /> | |
| </AllowedSigners> | |
| </ProductSigners> | |
| </SigningScenario> | |
| <SigningScenario ID="ID_SIGNINGSCENARIO_WINDOWS" Value="12"> | |
| <ProductSigners> | |
| <AllowedSigners> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0006" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0008" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0009" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000A" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000B" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000C" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000D" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000E" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_000F" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0010" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0011" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0012" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0003" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0004" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0005" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0013" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0014" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0017" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0001" /> | |
| <AllowedSigner SignerId="ID_SIGNER_S_0002" /> | |
| </AllowedSigners> | |
| <FileRulesRef> | |
| <FileRuleRef RuleID="ID_DENY_D_0001" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0002" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0003" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0004" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0005" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0006" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0007" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0008" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0009" /> | |
| <FileRuleRef RuleID="ID_DENY_D_000A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_000B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_000C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_000D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_000E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_000F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0010" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0011" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0012" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0013" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0014" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0015" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0016" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0017" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0018" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0019" /> | |
| <FileRuleRef RuleID="ID_DENY_D_001A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_001B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_001C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_001D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_001E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_001F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0020" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0021" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0022" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0023" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0024" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0025" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0026" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0027" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0028" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0029" /> | |
| <FileRuleRef RuleID="ID_DENY_D_002A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_002B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_002C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_002D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_002E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_002F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0030" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0031" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0032" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0033" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0035" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0036" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0037" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0038" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0039" /> | |
| <FileRuleRef RuleID="ID_DENY_D_003A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_003B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_003C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_003D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_003E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_003F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0040" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0041" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0042" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0043" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0044" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0045" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0047" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0048" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0049" /> | |
| <FileRuleRef RuleID="ID_DENY_D_004A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_004B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_004C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_004E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0050" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0051" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0052" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0053" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0054" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0055" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0056" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0057" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0058" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0059" /> | |
| <FileRuleRef RuleID="ID_DENY_D_005A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_005B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_005C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_005D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_005E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_005F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0060" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0061" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0062" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0063" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0064" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0065" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0066" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0067" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0068" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0069" /> | |
| <FileRuleRef RuleID="ID_DENY_D_006A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_006B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_006C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_006D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_006E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_006F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0070" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0071" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0072" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0073" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0075" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0076" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0077" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0078" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0079" /> | |
| <FileRuleRef RuleID="ID_DENY_D_007A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_007B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_007C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_007D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_007E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_007F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0080" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0081" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0083" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0084" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0085" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0086" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0087" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0088" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0089" /> | |
| <FileRuleRef RuleID="ID_DENY_D_008A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_008B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_008C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_008D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_008E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_008F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0090" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0091" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0092" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0093" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0094" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0095" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0096" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0097" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0098" /> | |
| <FileRuleRef RuleID="ID_DENY_D_0099" /> | |
| <FileRuleRef RuleID="ID_DENY_D_009A" /> | |
| <FileRuleRef RuleID="ID_DENY_D_009B" /> | |
| <FileRuleRef RuleID="ID_DENY_D_009C" /> | |
| <FileRuleRef RuleID="ID_DENY_D_009D" /> | |
| <FileRuleRef RuleID="ID_DENY_D_009E" /> | |
| <FileRuleRef RuleID="ID_DENY_D_009F" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A0" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A1" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A2" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A3" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A4" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A5" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A6" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A8" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00A9" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00AA" /> | |
| <FileRuleRef RuleID="ID_DENY_D_00AB" /> | |
| </FileRulesRef> | |
| </ProductSigners> | |
| </SigningScenario> | |
| </SigningScenarios> | |
| <UpdatePolicySigners> | |
| <UpdatePolicySigner SignerId="ID_SIGNER_S_0007" /> | |
| </UpdatePolicySigners> | |
| <CiSigners> | |
| <CiSigner SignerId="ID_SIGNER_S_0011" /> | |
| </CiSigners> | |
| </SiPolicy> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Thanks for your sharing.