MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.18900.3 Signature version: 1.359.429.0 11500400-922337203685477580861Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24844812hv-cinder-82815S-1-5-182/18/2022 4:18:14 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3248a4d58d48075b9a85fd3598f2657efa7e2264 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:42 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580860Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24842784hv-cinder-82815S-1-5-182/18/2022 3:25:42 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3248a4d58d48075b9a85fd3598f2657efa7e2264 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:42 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580859Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24842784hv-cinder-82815S-1-5-182/18/2022 3:25:42 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\44e77c15035f37005f7df9aeb8b2711bc8f199ff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:41 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580858Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24842780hv-cinder-82815S-1-5-182/18/2022 3:25:41 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\44e77c15035f37005f7df9aeb8b2711bc8f199ff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:41 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580857Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24842780hv-cinder-82815S-1-5-182/18/2022 3:25:41 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ad306e6ac8e3fb39a59bb26eb58242d716208d3b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:41 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580856Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:41 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ad306e6ac8e3fb39a59bb26eb58242d716208d3b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:41 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580855Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:41 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\283a79ee081e9c60b9fb94ca2f83585b046d6e14 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:40 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580854Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:40 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\283a79ee081e9c60b9fb94ca2f83585b046d6e14 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:40 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580853Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:40 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8a46159ff6dde7d8d56c741807d842d4e04125be Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:39 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580852Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24842784hv-cinder-82815S-1-5-182/18/2022 3:25:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8a46159ff6dde7d8d56c741807d842d4e04125be Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:39 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580851Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24842784hv-cinder-82815S-1-5-182/18/2022 3:25:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\674761fe4d47b85a4c3ade9e194e30f05f529fa3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:38 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580850Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\674761fe4d47b85a4c3ade9e194e30f05f529fa3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:38 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580849Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4503a3c8939b33e6cee585225e06a66fc6e1220a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:37 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580848Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:37 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4503a3c8939b33e6cee585225e06a66fc6e1220a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:37 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580847Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843428hv-cinder-82815S-1-5-182/18/2022 3:25:37 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4fc872c0df856b5615f35dbe2d24ebe289934f1a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:37 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580846Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843408hv-cinder-82815S-1-5-182/18/2022 3:25:37 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4fc872c0df856b5615f35dbe2d24ebe289934f1a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:25:37 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580845Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843408hv-cinder-82815S-1-5-182/18/2022 3:25:37 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2040caaab65776d21560563aa1e6f2cbae9edf62 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:22:33 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580844Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843416hv-cinder-82815S-1-5-182/18/2022 3:22:33 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.359.429.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2040caaab65776d21560563aa1e6f2cbae9edf62 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?18/?2022 3:22:33 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580843Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24843416hv-cinder-82815S-1-5-182/18/2022 3:22:33 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580842Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22123060WIN-5T344G8GM1HS-1-5-182/18/2022 3:17:37 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 119.0.0.0 Previous Signature Version: 118.2.0.0 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.020000400-922337203685477580841Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22123060WIN-5T344G8GM1HS-1-5-182/18/2022 3:17:37 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.359.429.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18900.3 Previous Engine Version: 1.1.14500.520000400-922337203685477580840Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22122492WIN-5T344G8GM1HS-1-5-182/18/2022 3:17:30 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.359.429.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18900.3 Previous Engine Version: 1.1.14500.520000400-922337203685477580839Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22122492WIN-5T344G8GM1HS-1-5-182/18/2022 3:17:30 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.18900.3 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580838Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22122492WIN-5T344G8GM1HS-1-5-182/18/2022 3:17:30 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value: 50070400-922337203685477580837Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22123060WIN-5T344G8GM1HS-1-5-182/18/2022 3:17:29 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580836Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580835Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:14:50 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580834Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580833Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580832Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580831Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x1750070400-922337203685477580830Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E50070400-922337203685477580829Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation = 50070400-922337203685477580828Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\50070400-922337203685477580827Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580826Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out 20010200-922337203685477580825Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580824Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580823Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580822Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x150070400-922337203685477580821Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162244WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580820Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580819Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580818Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580817Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:33:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580816Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.020000400-922337203685477580815Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport 50070400-922337203685477580814Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x350070400-922337203685477580813Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580812Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580811Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580810Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x050070400-92233720368547758089Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2136568WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:36 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\50070400-92233720368547758088Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242772WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM20020400-92233720368547758087Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version: 20000400-92233720368547758086Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport 50070400-92233720368547758085Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA50070400-92233720368547758084Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x150070400-92233720368547758083Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x150070400-92233720368547758082Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x250070400-92233720368547758081Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]