MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.19500.2 Signature version: 1.373.545.0 11500400-922337203685477580871Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25561392hv-cinder-85220S-1-5-188/18/2022 8:59:11 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\76bac2d02825fdf34199cbb45995bc55aed43190 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:30:40 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580870Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563716hv-cinder-85220S-1-5-188/18/2022 8:30:40 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\76bac2d02825fdf34199cbb45995bc55aed43190 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:30:40 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580869Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563716hv-cinder-85220S-1-5-188/18/2022 8:30:40 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0ef0524c8c776961f6ab3287185c5e4ab6e47e93 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:30:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580868Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563720hv-cinder-85220S-1-5-188/18/2022 8:30:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0ef0524c8c776961f6ab3287185c5e4ab6e47e93 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:30:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580867Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563720hv-cinder-85220S-1-5-188/18/2022 8:30:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0e7cb3faf022c188b5c08370c14a93091c258802 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:30:08 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580866Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563892hv-cinder-85220S-1-5-188/18/2022 8:30:08 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0e7cb3faf022c188b5c08370c14a93091c258802 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:30:08 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580865Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563892hv-cinder-85220S-1-5-188/18/2022 8:30:08 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9bc0ba4610b359be276dbcc7d15e6b23d914b719 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:27:27 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580864Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:27:27 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9bc0ba4610b359be276dbcc7d15e6b23d914b719 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:27:27 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580863Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:27:27 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\56088e67ca26b2b2f1d41f5559041413d4c6e0fe Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:27:03 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580862Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:27:03 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\56088e67ca26b2b2f1d41f5559041413d4c6e0fe Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:27:03 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580861Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:27:03 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2bb39f5bc4ecdd2800c329c36fa7aaaeb0e92e9d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:27:02 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580860Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563896hv-cinder-85220S-1-5-188/18/2022 8:27:02 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2bb39f5bc4ecdd2800c329c36fa7aaaeb0e92e9d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:27:02 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580859Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563896hv-cinder-85220S-1-5-188/18/2022 8:27:02 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\94df3b2e03f3d800d8c850ef167cd18ce0837c1d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:26:27 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580858Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563896hv-cinder-85220S-1-5-188/18/2022 8:26:27 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\94df3b2e03f3d800d8c850ef167cd18ce0837c1d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:26:27 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580857Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563896hv-cinder-85220S-1-5-188/18/2022 8:26:27 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\41d8b8cff2fb2cf4ccb5f883532e5c0d4a6918e6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:30 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580856Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563892hv-cinder-85220S-1-5-188/18/2022 8:06:30 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\41d8b8cff2fb2cf4ccb5f883532e5c0d4a6918e6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:30 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580855Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563892hv-cinder-85220S-1-5-188/18/2022 8:06:30 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0223054935eef746c033c841b6c48bf4a6100a7c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:29 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580854Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:06:29 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0223054935eef746c033c841b6c48bf4a6100a7c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:29 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580853Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:06:29 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9d5f9dd0babff0e459b9da566e1f4c2f953e6591 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:29 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580852Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562920hv-cinder-85220S-1-5-188/18/2022 8:06:29 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9d5f9dd0babff0e459b9da566e1f4c2f953e6591 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:29 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580851Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562920hv-cinder-85220S-1-5-188/18/2022 8:06:29 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d0e4b9a268634f09e65735233fad9866d58adc4d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:24 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580850Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563056hv-cinder-85220S-1-5-188/18/2022 8:06:24 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d0e4b9a268634f09e65735233fad9866d58adc4d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:24 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580849Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563056hv-cinder-85220S-1-5-188/18/2022 8:06:24 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7bd68438666778fc67bc5996dc2b93909aaaa82e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:24 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580848Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:06:24 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7bd68438666778fc67bc5996dc2b93909aaaa82e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:24 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580847Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:06:24 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\86c3f67e9777f93449ae7412a56cc0a9a63cbc49 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:23 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580846Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:06:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\86c3f67e9777f93449ae7412a56cc0a9a63cbc49 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:23 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580845Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562916hv-cinder-85220S-1-5-188/18/2022 8:06:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c172e16f34d824de4072d1aae1f669355412dc69 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:22 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580844Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562920hv-cinder-85220S-1-5-188/18/2022 8:06:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c172e16f34d824de4072d1aae1f669355412dc69 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:22 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580843Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25562920hv-cinder-85220S-1-5-188/18/2022 8:06:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1e870adf2e7b11d38d38f9b5935924f38e7b1a04 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:22 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580842Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563056hv-cinder-85220S-1-5-188/18/2022 8:06:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.373.545.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19500.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1e870adf2e7b11d38d38f9b5935924f38e7b1a04 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?8/?18/?2022 8:06:22 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580841Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25563056hv-cinder-85220S-1-5-188/18/2022 8:06:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.373.545.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.19500.2 Previous Engine Version: 1.1.14500.520000400-922337203685477580840Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21842692WIN-5T344G8GM1HS-1-5-188/18/2022 7:58:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.373.545.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.19500.2 Previous Engine Version: 1.1.14500.520000400-922337203685477580839Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21842692WIN-5T344G8GM1HS-1-5-188/18/2022 7:58:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.19500.2 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580838Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21842692WIN-5T344G8GM1HS-1-5-188/18/2022 7:58:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value: 50070400-922337203685477580837Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21842132WIN-5T344G8GM1HS-1-5-188/18/2022 7:58:36 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580836Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580835Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:14:50 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580834Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580833Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580832Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580831Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x1750070400-922337203685477580830Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E50070400-922337203685477580829Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation = 50070400-922337203685477580828Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\50070400-922337203685477580827Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580826Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out 20010200-922337203685477580825Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580824Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580823Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580822Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x150070400-922337203685477580821Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162244WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580820Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580819Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580818Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580817Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:33:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580816Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.020000400-922337203685477580815Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport 50070400-922337203685477580814Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x350070400-922337203685477580813Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580812Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580811Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580810Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x050070400-92233720368547758089Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2136568WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:36 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\50070400-92233720368547758088Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242772WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM20020400-92233720368547758087Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version: 20000400-92233720368547758086Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport 50070400-92233720368547758085Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA50070400-92233720368547758084Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x150070400-92233720368547758083Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x150070400-92233720368547758082Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x250070400-92233720368547758081Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]