Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	118	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3516	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:56 AM	2faa4567-ce4f-4cc6-a8b6-37aed3657eca		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\537b4913aaf50fa4cc05806b637d949cc37b7ec3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	117	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\537b4913aaf50fa4cc05806b637d949cc37b7ec3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	116	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c4c876dec67924cc6533602118a2cd7f309d3751 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	115	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c4c876dec67924cc6533602118a2cd7f309d3751 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	114	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\907df2fffeb0bb1cc199590a9079fcfaaff5b541 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	113	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\907df2fffeb0bb1cc199590a9079fcfaaff5b541 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	112	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7c127afdfd19402a404445b299fb3b6eb22c1b6d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	111	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7c127afdfd19402a404445b299fb3b6eb22c1b6d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	110	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0b27a5391fb5a99296616747a2ad690bb1f05f81 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	109	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0b27a5391fb5a99296616747a2ad690bb1f05f81 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	108	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\888bc46e41c899c5f10cd07f25a2a303ec6f3db7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	107	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\888bc46e41c899c5f10cd07f25a2a303ec6f3db7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	106	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\448af6a29f61177f3b8465eac50a738d0fc61a1b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	105	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\448af6a29f61177f3b8465eac50a738d0fc61a1b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	104	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3c84a56f6788c24a82a6638f20c65f94a96ccd3f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	103	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3c84a56f6788c24a82a6638f20c65f94a96ccd3f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	102	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\93954787ebd5d386e7bdc35692c6735472cf47d3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	101	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\93954787ebd5d386e7bdc35692c6735472cf47d3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	100	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f884a37f0c5c092891a934504907f9b05d71f9cb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	99	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f884a37f0c5c092891a934504907f9b05d71f9cb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	98	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f3b71a61e6302e13376477f69bcc1308be51188b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	97	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f3b71a61e6302e13376477f69bcc1308be51188b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	96	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a1e09fc632c6cc6029671c24d860452a26738014 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	95	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a1e09fc632c6cc6029671c24d860452a26738014 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	94	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b64bf7ccf5e6eac4b4d1628c32bf47c0a7eb6aca Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	93	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b64bf7ccf5e6eac4b4d1628c32bf47c0a7eb6aca Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	92	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4e510a1859b683e92c4d6b91c20fdb7d4e64a169 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	91	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4e510a1859b683e92c4d6b91c20fdb7d4e64a169 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	90	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\27bd136522195491596cd42150a36a0179085783 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	89	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\27bd136522195491596cd42150a36a0179085783 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:55 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	88	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c456122b39e902a4ba3e4c48045668aaf65a4ac8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 864000000	2010	0		4	0	0	-9223372036854775808	87	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c456122b39e902a4ba3e4c48045668aaf65a4ac8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 864000000	2010	0		4	0	0	-9223372036854775808	86	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\35aea0af6c4ef78de12f23ebf3fbae838227eb68 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	85	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\35aea0af6c4ef78de12f23ebf3fbae838227eb68 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	84	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b1e05c67eefbd41f6a26a29217424a63c52d7df2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	83	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b1e05c67eefbd41f6a26a29217424a63c52d7df2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	82	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5780f5bf9bdb0dbde02a9571b2fdff03025287d1 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	81	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5780f5bf9bdb0dbde02a9571b2fdff03025287d1 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	80	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ac940a52e9a7c67e1f8cabee7aa03a250283538e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	79	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ac940a52e9a7c67e1f8cabee7aa03a250283538e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	78	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6a51aaf934e09fb7ba71313a386f7af77e060d43 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	77	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6a51aaf934e09fb7ba71313a386f7af77e060d43 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	76	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6260690aba72d71d5448e36d566e5b0309831349 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	75	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6260690aba72d71d5448e36d566e5b0309831349 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	74	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:55 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\571b0322c775119cbdbc546c42d1c44f6941ad2c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	73	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\571b0322c775119cbdbc546c42d1c44f6941ad2c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	72	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\383a73eb30a2b5c6b8f14c02ff5b12bc96614303 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	71	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\383a73eb30a2b5c6b8f14c02ff5b12bc96614303 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	70	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ece0d2e1fc74aad5ff693341132d68cd2fb6b7cb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	69	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ece0d2e1fc74aad5ff693341132d68cd2fb6b7cb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	68	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7aaf41e60346fd9906ee9a5743838a59747c0a63 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	67	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7aaf41e60346fd9906ee9a5743838a59747c0a63 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	66	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c77ca8f38273d32b57c62dfaf5302fff9c646b83 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	65	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c77ca8f38273d32b57c62dfaf5302fff9c646b83 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	64	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5cf7f911a517d9d9dfcca33b51e6e9624b632fdb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	63	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5cf7f911a517d9d9dfcca33b51e6e9624b632fdb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	62	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a380bb2c340c0531142ad1448ce9e31aa351faf6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	61	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a380bb2c340c0531142ad1448ce9e31aa351faf6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	60	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9ff135872b61bfb19050ea209972d4e9a1a757b2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	59	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9ff135872b61bfb19050ea209972d4e9a1a757b2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	58	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\35eaf9aae270e89397f92c399e92acf0c8ebc42c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	57	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\35eaf9aae270e89397f92c399e92acf0c8ebc42c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e8c9bf3df415351e9a53309b5bbb1fde59fc81b6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e8c9bf3df415351e9a53309b5bbb1fde59fc81b6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2f7dd227eef1cbb23043cb230446e043e5652ea8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2f7dd227eef1cbb23043cb230446e043e5652ea8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\02dbc72b32853d453f009c58e03b61e896ce75c5 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\02dbc72b32853d453f009c58e03b61e896ce75c5 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3aa3bef9a993653d687300d387952f364c53de67 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3aa3bef9a993653d687300d387952f364c53de67 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c8e6e5cda602667a41fec1ae68ec5037016d9998 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c8e6e5cda602667a41fec1ae68ec5037016d9998 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d93bdcfcdc49e4b62609d228d50be762ebbf6f3e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.335.91.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18000.5 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d93bdcfcdc49e4b62609d228d50be762ebbf6f3e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?4/?3/?2021 4:44:54 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2508	3560	hv-cinder-78462	S-1-5-18	4/3/2021 4:44:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	3028	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:26 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 119.0.0.0 Previous Signature Version: 118.2.0.0 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0	2000	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	3028	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:26 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	41	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	520	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:23 AM	9ee792d7-4d32-4196-af7a-859f67fec639		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.335.91.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18000.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	2580	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:22 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.335.91.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18000.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	2580	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:22 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.18000.5 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	2580	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:22 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value:	5007	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2172	3028	WIN-5T344G8GM1H	S-1-5-18	4/3/2021 4:43:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	36	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:48 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:14:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	34	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	33	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17	5007	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E	5007	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation =	5007	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\	5007	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	26	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:45:57 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out	2001	0		2	0	0	-9223372036854775808	25	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1	5007	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2244	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	20	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	19	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	18	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:33:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0	2000	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x3	5007	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x0	5007	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	568	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:36 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\	5007	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2772	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM	2002	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version:	2000	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA	5007	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1	5007	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x1	5007	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x2	5007	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:16 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]