Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	139	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2472	3732	n-h1-791505-7.cbci-791505-7.local	S-1-5-18	6/2/2021 6:41:40 PM	9fa2fda4-34e6-4e2b-b3e2-b331080c80a8		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	138	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2472	2876	n-h1-791505-7.cbci-791505-7.local	S-1-5-18	6/2/2021 6:41:38 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	137	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2472	2876	n-h1-791505-7.cbci-791505-7.local	S-1-5-18	6/2/2021 6:41:38 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	136	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2472	2876	n-h1-791505-7.cbci-791505-7.local	S-1-5-18	6/2/2021 6:41:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	135	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2472	2876	n-h1-791505-7.cbci-791505-7.local	S-1-5-18	6/2/2021 6:41:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	134	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3660	n-h1-791505-7	S-1-5-18	6/2/2021 5:56:22 PM	324d6adf-40f2-4e0e-8fdb-a32b0dd26945		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a9e9bdb996a5f736b1f4d35548a194ed6da78e53 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:44 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	133	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a9e9bdb996a5f736b1f4d35548a194ed6da78e53 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:44 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	132	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\003d42b320aa85f6b1a26798a169dca161fedb7c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	131	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\003d42b320aa85f6b1a26798a169dca161fedb7c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	130	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c2f343b5fff5331f59c72ad0eded2b380fc927da Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	129	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c2f343b5fff5331f59c72ad0eded2b380fc927da Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	128	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2acae215da22b8fb2f90b7016b8ca9c2d44bfd48 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	127	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2acae215da22b8fb2f90b7016b8ca9c2d44bfd48 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	126	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\456f4e621b762891e64877145ba2e0afe7ad4bae Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	125	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\456f4e621b762891e64877145ba2e0afe7ad4bae Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	124	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\70762e5391cbbe875d994608b7432530f39996fb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	123	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\70762e5391cbbe875d994608b7432530f39996fb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	122	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a30eaba9faeb2cbbdce71b61c86573d9c4618c46 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	121	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a30eaba9faeb2cbbdce71b61c86573d9c4618c46 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	120	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3720	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2f465e38debaf0e462933214a7a422614d6e0885 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	119	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2f465e38debaf0e462933214a7a422614d6e0885 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	118	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\cf62f3b5097d568fae17d48f9f2dca9347cc7fa0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	117	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\cf62f3b5097d568fae17d48f9f2dca9347cc7fa0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	116	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9c69dc5515c616041fabc8a30993cc5e2e097164 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	115	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9c69dc5515c616041fabc8a30993cc5e2e097164 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	114	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8c1d3a4be2ecab20b77b5a9f00f076cfc9a0b5d3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	113	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8c1d3a4be2ecab20b77b5a9f00f076cfc9a0b5d3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	112	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bfd5e6a7acd0698f70a8c263422f52651de9641c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	111	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bfd5e6a7acd0698f70a8c263422f52651de9641c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	110	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b7c792a3b45570828c6363a6985b6c35236e0429 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	109	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b7c792a3b45570828c6363a6985b6c35236e0429 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	108	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\843f16614dafb2d6a0a257084b78b0a2f9957879 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	107	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\843f16614dafb2d6a0a257084b78b0a2f9957879 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	106	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4a02bbb698cc62fedab716fb54401bb6bb754343 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	105	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4a02bbb698cc62fedab716fb54401bb6bb754343 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	104	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e31683a03de502e679dfe32ff73193240d233c14 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	103	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e31683a03de502e679dfe32ff73193240d233c14 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	102	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\93d498291cc3e8758baf12d2b7066d1563c2b7d2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	101	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\93d498291cc3e8758baf12d2b7066d1563c2b7d2 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	100	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bc3cce046c49bf7130e2d363b5c8eaaa2a9a24ef Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	99	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bc3cce046c49bf7130e2d363b5c8eaaa2a9a24ef Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	98	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3904	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c875df74824554fbc4d80ea7c49e175fd1304c75 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	97	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3224	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c875df74824554fbc4d80ea7c49e175fd1304c75 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	96	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3224	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b347793bc89e95f1562facbb34ce39cb6cd48981 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	95	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	2884	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b347793bc89e95f1562facbb34ce39cb6cd48981 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	94	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	2884	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:44 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7367d41bdde46e419d2f92e8ba76b1a9d4a80f1a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	93	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7367d41bdde46e419d2f92e8ba76b1a9d4a80f1a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	92	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e6210964b9f9244dee8433dbf3729ebd85da6325 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	91	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e6210964b9f9244dee8433dbf3729ebd85da6325 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	90	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3749ff27876fd903bc6892d1b1aab20a8dfbe6e8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	89	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3749ff27876fd903bc6892d1b1aab20a8dfbe6e8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	88	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\738fa833b5a7a912ed190d527a50a514d09f742a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	87	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\738fa833b5a7a912ed190d527a50a514d09f742a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	86	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\316d1b0b310f94dc8a9952789d694c2ae020da4b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	85	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\316d1b0b310f94dc8a9952789d694c2ae020da4b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	84	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\417a2fb33f30c26d4c46ef7cf07483da1fa8db9a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	83	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\417a2fb33f30c26d4c46ef7cf07483da1fa8db9a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	82	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\751e8e7ece02d8d81ac5d293a39d712ce3eaa5dd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	81	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\751e8e7ece02d8d81ac5d293a39d712ce3eaa5dd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	80	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0f0cb6cdeb92a971faa6ebd30063340d85b407be Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	79	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0f0cb6cdeb92a971faa6ebd30063340d85b407be Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	78	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\fed49b8d524342d8bf8edc64563ed60122673af4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	77	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\fed49b8d524342d8bf8edc64563ed60122673af4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	76	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\50085e0c5347a1dc83aed9c2f3784cf55689fdb1 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	75	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\50085e0c5347a1dc83aed9c2f3784cf55689fdb1 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	74	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1b0fb98aa80c71523becfcd85569eb608bf5f457 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	73	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1b0fb98aa80c71523becfcd85569eb608bf5f457 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	72	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b92b5ce340839349c3fe91af5538fe6c3830d0f3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	71	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b92b5ce340839349c3fe91af5538fe6c3830d0f3 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	70	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9abd5888117112e2aaeba87e7e0d0015d60d4ed9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	69	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9abd5888117112e2aaeba87e7e0d0015d60d4ed9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	68	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\580da00268123f2b08a93ab70e1fb34130aacfef Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	67	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\580da00268123f2b08a93ab70e1fb34130aacfef Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	66	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6785c9401b307ae1757ff858dd202aea4c86dcf7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	65	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6785c9401b307ae1757ff858dd202aea4c86dcf7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	64	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bc5cae74a00b14689094bcfbb58eb74fdecc7774 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	63	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bc5cae74a00b14689094bcfbb58eb74fdecc7774 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	62	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1bbf7f58e0fbf31370138b04c03e6f8d5ce77b48 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	61	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1bbf7f58e0fbf31370138b04c03e6f8d5ce77b48 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	60	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\53727333e974643d61f84986d6455c945bd401d4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	59	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\53727333e974643d61f84986d6455c945bd401d4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	58	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b5bb93a1623979e0a65b284b998d7601b23005bf Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	57	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b5bb93a1623979e0a65b284b998d7601b23005bf Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c23525dad0c6bd3148e6db35d7801f6a948bd242 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c23525dad0c6bd3148e6db35d7801f6a948bd242 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ed85f2e33455f7b0c6ef4d61890d4575f47a2c4c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ed85f2e33455f7b0c6ef4d61890d4575f47a2c4c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bbaaf229ba6d8f26b88c2bb24a2b72c410846827 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.339.1889.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18100.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bbaaf229ba6d8f26b88c2bb24a2b72c410846827 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?2/?2021 5:54:43 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	3900	n-h1-791505-7	S-1-5-18	6/2/2021 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	2888	n-h1-791505-7	S-1-5-18	6/2/2021 5:53:56 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	2888	n-h1-791505-7	S-1-5-18	6/2/2021 5:53:56 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	2884	n-h1-791505-7	S-1-5-18	6/2/2021 5:53:54 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2552	2884	n-h1-791505-7	S-1-5-18	6/2/2021 5:53:54 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2500	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:11 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 119.0.0.0 Previous Signature Version: 118.2.0.0 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0	2000	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2500	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:11 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	43	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2688	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:08 PM	9f176882-7f1d-41a9-b815-9fbd20a8a6e2		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.339.1889.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18100.6 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2500	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:07 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.339.1889.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18100.6 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2500	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:07 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.18100.6 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2500	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:07 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value:	5007	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	1184	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:02 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	1184	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:02 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	1184	WIN-5T344G8GM1H	S-1-5-18	6/2/2021 5:53:02 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	36	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:48 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:14:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	34	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	33	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17	5007	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E	5007	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation =	5007	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\	5007	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	26	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:45:57 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out	2001	0		2	0	0	-9223372036854775808	25	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1	5007	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2244	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	20	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	19	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	18	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:33:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0	2000	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x3	5007	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x0	5007	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	568	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:36 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\	5007	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2772	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM	2002	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version:	2000	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA	5007	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1	5007	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x1	5007	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x2	5007	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:16 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]