Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bb0d716123a45fccbaed270849d0fbf4ed7f2b77 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	114	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bb0d716123a45fccbaed270849d0fbf4ed7f2b77 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	113	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\fdcd17ea3698d37043da92948a5ddbd56c0cfdf6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	112	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\fdcd17ea3698d37043da92948a5ddbd56c0cfdf6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	111	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9735ab6b3ae1b974d10a2a986a0d5f84ac0b7d9f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	110	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9735ab6b3ae1b974d10a2a986a0d5f84ac0b7d9f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	109	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b26c3558e6b03fcdef8e05e32998501fc119561a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	108	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b26c3558e6b03fcdef8e05e32998501fc119561a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	107	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\00b6cb4cae5f2ebbc47023e44d2f1710d52f51d7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	106	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\00b6cb4cae5f2ebbc47023e44d2f1710d52f51d7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	105	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f3a33a0ae7bcc009823082f9bec6278468c3869e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	104	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f3a33a0ae7bcc009823082f9bec6278468c3869e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	103	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9d4d2c634ddf4732d7e3b30180d6308213aacfc6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	102	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9d4d2c634ddf4732d7e3b30180d6308213aacfc6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	101	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b10e733a16c829705380a73d5843365c8e89bd96 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	100	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b10e733a16c829705380a73d5843365c8e89bd96 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	99	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7607e5d5be25111056e5cae51f610f7c98c72076 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	98	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7607e5d5be25111056e5cae51f610f7c98c72076 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	97	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\30d335a3af4bbc1186fe6094a873a05f73ddd6ff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	96	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\30d335a3af4bbc1186fe6094a873a05f73ddd6ff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	95	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\cbbcce92f28b0c82f1fadfd310d53e59d5a4a0d6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	94	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\cbbcce92f28b0c82f1fadfd310d53e59d5a4a0d6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	93	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ed867420ce1ef5057d8780cee1111bdf6cb0d2fc Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	92	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ed867420ce1ef5057d8780cee1111bdf6cb0d2fc Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	91	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\73106ea58dd918423e1332da207f69c5d8d7228c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	90	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\73106ea58dd918423e1332da207f69c5d8d7228c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	89	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ab1157b93826f2b589f178083d16598ad080bd64 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	88	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ab1157b93826f2b589f178083d16598ad080bd64 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:50 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	87	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3848	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:50 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\36ddb3b9201a4736c833f0f0a7c1c628f53844ff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	86	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\36ddb3b9201a4736c833f0f0a7c1c628f53844ff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	85	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b558a3e9566e8e2d6e4f296c4495396a7eea9f4e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	84	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b558a3e9566e8e2d6e4f296c4495396a7eea9f4e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	83	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\63bcbee4405bb53d2e15dca46d0f55688efa368f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	82	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\63bcbee4405bb53d2e15dca46d0f55688efa368f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	81	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b385b40412e0fbf2dafc0e60857b1f1e17e243a7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	80	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b385b40412e0fbf2dafc0e60857b1f1e17e243a7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	79	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2762a7098b9f6a56c4b72d95510d878a08695448 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	78	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2762a7098b9f6a56c4b72d95510d878a08695448 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	77	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\49ebe08fface4d6810db33acce60e1e9d9397576 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	76	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\49ebe08fface4d6810db33acce60e1e9d9397576 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	75	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\668d1a4b2319b19cc2a6853e4321bb588957f6b9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	74	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\668d1a4b2319b19cc2a6853e4321bb588957f6b9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	73	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b0f0ff16e3f750878c8ebb26f8e8fd04ff675218 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	72	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b0f0ff16e3f750878c8ebb26f8e8fd04ff675218 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	71	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a9a0295f7e0b4a85d312918da25abc61979ddc17 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	70	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a9a0295f7e0b4a85d312918da25abc61979ddc17 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	69	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4370802bd208e4bfc523159ccefc881979f4b918 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	68	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4370802bd208e4bfc523159ccefc881979f4b918 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	67	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\88267fcf934b0e0c8479e03b05200aed7e9d2b23 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	66	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\88267fcf934b0e0c8479e03b05200aed7e9d2b23 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	65	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\53d1bdb0d9702622c04df90f2ac7af6321e7d49d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	64	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\53d1bdb0d9702622c04df90f2ac7af6321e7d49d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	63	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\dc3c28c516898aa53399824fb3724e67a19bf2cf Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	62	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\dc3c28c516898aa53399824fb3724e67a19bf2cf Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	61	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\98dd730ec9075ca6b1dc6db7f5d615a1f3c771a2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	60	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\98dd730ec9075ca6b1dc6db7f5d615a1f3c771a2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	59	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9ad72a28ef7c8254970eb2924f53b73b22dcfda9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	58	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9ad72a28ef7c8254970eb2924f53b73b22dcfda9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	57	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4f7ebd102bc94e4389e20d27e5fa14b3ae5a3515 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4f7ebd102bc94e4389e20d27e5fa14b3ae5a3515 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\17b633909e857567ddc4eb7077b38bcfd3d1e7f9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 864000000	2010	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\17b633909e857567ddc4eb7077b38bcfd3d1e7f9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 864000000	2010	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3beedbd3e62b5086ecadc2007984d74d4034649a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3beedbd3e62b5086ecadc2007984d74d4034649a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9e93bbc85f5182dea4a3d4116429c0b8edea1df2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9e93bbc85f5182dea4a3d4116429c0b8edea1df2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\fa8b55568f3710ec4a5bb5416f9264fbcf199897 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\fa8b55568f3710ec4a5bb5416f9264fbcf199897 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9cdf158e87dd1b93810e0ccbc06e6c11f579d670 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9cdf158e87dd1b93810e0ccbc06e6c11f579d670 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\425f2844dd9ca9cf13a8e89c335b8c2d278b5d3b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.331.1207.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.17800.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\425f2844dd9ca9cf13a8e89c335b8c2d278b5d3b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?17/?2021 6:10:49 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2564	3784	hv-cinder-76019	S-1-5-18	2/17/2021 6:10:49 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2124	2436	WIN-5T344G8GM1H	S-1-5-18	2/17/2021 6:09:07 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 119.0.0.0 Previous Signature Version: 118.2.0.0 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0	2000	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2124	2436	WIN-5T344G8GM1H	S-1-5-18	2/17/2021 6:09:07 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.331.1207.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.17800.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2124	2576	WIN-5T344G8GM1H	S-1-5-18	2/17/2021 6:09:01 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.331.1207.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.17800.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2124	2576	WIN-5T344G8GM1H	S-1-5-18	2/17/2021 6:09:01 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.17800.5 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2124	2576	WIN-5T344G8GM1H	S-1-5-18	2/17/2021 6:09:01 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value:	5007	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2124	2768	WIN-5T344G8GM1H	S-1-5-18	2/17/2021 6:08:54 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	36	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:48 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:14:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	34	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	33	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17	5007	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E	5007	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation =	5007	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\	5007	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	26	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:45:57 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out	2001	0		2	0	0	-9223372036854775808	25	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1	5007	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2244	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	20	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	19	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	18	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:33:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0	2000	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x3	5007	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x0	5007	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	568	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:36 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\	5007	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2772	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM	2002	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version:	2000	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA	5007	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1	5007	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x1	5007	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x2	5007	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:16 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]