MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.19400.3 Signature version: 1.371.503.0 11500400-922337203685477580880Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24323672n-h2-623558-11.cbci-623558-11.localS-1-5-187/20/2022 10:23:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.19400.3 Signature version: 1.371.503.0 11500400-922337203685477580879Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24323748n-h2-623558-11.cbci-623558-11.localS-1-5-187/20/2022 9:23:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\837f1d43206b23753a82cfd32a120f02426a9e6f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:05:51 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580878Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163872n-h2-623558-11S-1-5-187/20/2022 8:05:51 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\837f1d43206b23753a82cfd32a120f02426a9e6f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:05:51 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580877Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163872n-h2-623558-11S-1-5-187/20/2022 8:05:51 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d7f6b3da67044f6fec29331c4448f108c999041f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:05:32 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580876Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163652n-h2-623558-11S-1-5-187/20/2022 8:05:32 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d7f6b3da67044f6fec29331c4448f108c999041f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:05:32 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580875Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163652n-h2-623558-11S-1-5-187/20/2022 8:05:32 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8384ae468360ccad3c6e691960a5fb5bcf5d2e72 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:03:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580874Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163040n-h2-623558-11S-1-5-187/20/2022 8:03:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8384ae468360ccad3c6e691960a5fb5bcf5d2e72 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:03:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580873Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163040n-h2-623558-11S-1-5-187/20/2022 8:03:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ed91437be6ce38c0e7661d3a4b8f1d06c7e27b1a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:03:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580872Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163040n-h2-623558-11S-1-5-187/20/2022 8:03:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ed91437be6ce38c0e7661d3a4b8f1d06c7e27b1a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:03:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580871Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163040n-h2-623558-11S-1-5-187/20/2022 8:03:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3f48bb2bd1ffa0bb8442b549d38294d2b070b91c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:02:50 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580870Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163804n-h2-623558-11S-1-5-187/20/2022 8:02:50 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3f48bb2bd1ffa0bb8442b549d38294d2b070b91c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:02:50 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580869Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163804n-h2-623558-11S-1-5-187/20/2022 8:02:50 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ea24f15b3b3ec89e511769a55e78f58b449bc4a6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:02:25 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580868Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163652n-h2-623558-11S-1-5-187/20/2022 8:02:25 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ea24f15b3b3ec89e511769a55e78f58b449bc4a6 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:02:25 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580867Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163652n-h2-623558-11S-1-5-187/20/2022 8:02:25 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8c46534b4278745156b0c2da613b0ddb34cf95b2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:02:01 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580866Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163740n-h2-623558-11S-1-5-187/20/2022 8:02:01 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8c46534b4278745156b0c2da613b0ddb34cf95b2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 8:02:01 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580865Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163740n-h2-623558-11S-1-5-187/20/2022 8:02:01 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c99c9a9db9e7bc3f7069fa9181523fe0034e1ec7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:58:43 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580864Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:58:43 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c99c9a9db9e7bc3f7069fa9181523fe0034e1ec7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:58:43 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580863Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:58:43 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\45dcf539814443953a051f9dde57141e9bdf50ab Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:22 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580862Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163740n-h2-623558-11S-1-5-187/20/2022 7:52:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\45dcf539814443953a051f9dde57141e9bdf50ab Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:22 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580861Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163740n-h2-623558-11S-1-5-187/20/2022 7:52:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2902b3379b7f4f1eb61974e75cf9b1a6367305bf Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:21 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580860Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:52:21 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2902b3379b7f4f1eb61974e75cf9b1a6367305bf Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:21 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580859Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:52:21 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2d689b77ec46a5a815f152f9b758d9765e1c458a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:21 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580858Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:52:21 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2d689b77ec46a5a815f152f9b758d9765e1c458a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:21 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580857Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:52:21 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c9d89f5201b2c5e70af482e39be05c62facc222b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:20 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580856Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163800n-h2-623558-11S-1-5-187/20/2022 7:52:21 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c9d89f5201b2c5e70af482e39be05c62facc222b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:20 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580855Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163800n-h2-623558-11S-1-5-187/20/2022 7:52:21 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\352387f00d3c68c71bd20a7923d587500a3cf0f0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:20 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580854Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163804n-h2-623558-11S-1-5-187/20/2022 7:52:20 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\352387f00d3c68c71bd20a7923d587500a3cf0f0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:20 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580853Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163804n-h2-623558-11S-1-5-187/20/2022 7:52:20 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1d9e647687f25775ffc95aa2baa7d04a771228d4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580852Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163800n-h2-623558-11S-1-5-187/20/2022 7:52:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1d9e647687f25775ffc95aa2baa7d04a771228d4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580851Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163800n-h2-623558-11S-1-5-187/20/2022 7:52:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d17bb19c6a43126fe2f7119e38251c8b672829ee Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580850Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:52:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d17bb19c6a43126fe2f7119e38251c8b672829ee Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580849Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162364n-h2-623558-11S-1-5-187/20/2022 7:52:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0fd4a3b222c7034b528702df2e71cc2739b2de69 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580848Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163804n-h2-623558-11S-1-5-187/20/2022 7:52:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0fd4a3b222c7034b528702df2e71cc2739b2de69 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:52:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580847Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26163804n-h2-623558-11S-1-5-187/20/2022 7:52:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e80c445029bbea2cfb2dcecb2f64329680d67267 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:50:46 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580846Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162092n-h2-623558-11S-1-5-187/20/2022 7:50:46 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.371.503.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19400.3 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e80c445029bbea2cfb2dcecb2f64329680d67267 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?20/?2022 7:50:46 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580845Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational26162092n-h2-623558-11S-1-5-187/20/2022 7:50:46 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Real-Time Protection feature has encountered an error and failed. Feature: Network Inspection System Error Code: 0x8007045b Error description: A system shutdown is in progress. Reason: Antimalware protection has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.30020200-922337203685477580844Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362512n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x8007045b Error description: A system shutdown is in progress. Reason: Antimalware protection has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.30020200-922337203685477580843Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362512n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Real-Time Protection feature has encountered an error and failed. Feature: On Access Error Code: 0x8007045b Error description: A system shutdown is in progress. Reason: Antimalware protection has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.30020200-922337203685477580842Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362512n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Real-time Protection scanning for malware and other potentially unwanted software was disabled.50010400-922337203685477580841Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362512n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.371.503.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.19400.3 Previous Engine Version: 1.1.14500.520000400-922337203685477580840Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21361976n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.371.503.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.19400.3 Previous Engine Version: 1.1.14500.520000400-922337203685477580839Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21361976n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.19400.3 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580838Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21361976n-h2-623558-11S-1-5-187/20/2022 7:40:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value: 50070400-922337203685477580837Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362512WIN-5T344G8GM1HS-1-5-187/20/2022 7:40:17 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580836Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580835Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:14:50 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580834Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580833Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580832Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580831Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x1750070400-922337203685477580830Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E50070400-922337203685477580829Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation = 50070400-922337203685477580828Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\50070400-922337203685477580827Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580826Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out 20010200-922337203685477580825Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580824Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580823Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580822Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x150070400-922337203685477580821Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162244WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580820Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580819Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580818Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580817Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:33:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580816Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.020000400-922337203685477580815Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport 50070400-922337203685477580814Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x350070400-922337203685477580813Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580812Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580811Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580810Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x050070400-92233720368547758089Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2136568WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:36 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\50070400-92233720368547758088Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242772WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM20020400-92233720368547758087Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version: 20000400-92233720368547758086Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport 50070400-92233720368547758085Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA50070400-92233720368547758084Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x150070400-92233720368547758083Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x150070400-92233720368547758082Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x250070400-92233720368547758081Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]