Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	142	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2504	3764	n-h2-798054-12.cbci-798054-12.local	S-1-5-18	7/16/2021 8:26:19 AM	c4e82550-35f9-4160-b5ba-bca19ca6b562		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	141	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2504	2928	n-h2-798054-12.cbci-798054-12.local	S-1-5-18	7/16/2021 8:26:14 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	140	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2504	2928	n-h2-798054-12.cbci-798054-12.local	S-1-5-18	7/16/2021 8:26:14 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	139	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2504	2924	n-h2-798054-12.cbci-798054-12.local	S-1-5-18	7/16/2021 8:26:11 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	138	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2504	2924	n-h2-798054-12.cbci-798054-12.local	S-1-5-18	7/16/2021 8:26:11 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d88f2f60b18d8b5efe335d70b9db7a5dffb0442c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	137	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\d88f2f60b18d8b5efe335d70b9db7a5dffb0442c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	136	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bd6243cd5cac01a0786b9c218920dbf4264acef0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	135	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bd6243cd5cac01a0786b9c218920dbf4264acef0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	134	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\29591a3441f807f03d3f55e7ec0bbd848df6ed3d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	133	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\29591a3441f807f03d3f55e7ec0bbd848df6ed3d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	132	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e38cbd3fba8bbb3b4d5e03a7f6981485c38030db Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	131	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e38cbd3fba8bbb3b4d5e03a7f6981485c38030db Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	130	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\08803b252ce44309bf75230a0a03e8e7017394c7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	129	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\08803b252ce44309bf75230a0a03e8e7017394c7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	128	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8b1e8a2cd9da8e9730844100d69bc601b963677e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	127	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8b1e8a2cd9da8e9730844100d69bc601b963677e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	126	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3ce295777376aba3a658358e35fa36ff3f3bc2ed Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	125	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3ce295777376aba3a658358e35fa36ff3f3bc2ed Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	124	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6c67eca636e98ee84ab409d44a2c9e57799907b4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	123	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6c67eca636e98ee84ab409d44a2c9e57799907b4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	122	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f2c45a4b37d90bd8ab856d0942b63da5ac4e9c4d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	121	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f2c45a4b37d90bd8ab856d0942b63da5ac4e9c4d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	120	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f613ba695875513f5b9dbf3616b5e724a38b6187 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	119	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f613ba695875513f5b9dbf3616b5e724a38b6187 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	118	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0aa708afad3ed38dd798be7c00eaa676c40f1d1d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	117	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0aa708afad3ed38dd798be7c00eaa676c40f1d1d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	116	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7fb746f5494b31aa8169320c2add6164afa090eb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	115	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7fb746f5494b31aa8169320c2add6164afa090eb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	114	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ca4bbb0e72b6d6c179dcfefdc90c7ee40a5e75a9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	113	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ca4bbb0e72b6d6c179dcfefdc90c7ee40a5e75a9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	112	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f10334ab2576679539427d9c57f222b6d070e48f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	111	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f10334ab2576679539427d9c57f222b6d070e48f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	110	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bc70467dd50c379079fa98898f1a30e99eb7e8f7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	109	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\bc70467dd50c379079fa98898f1a30e99eb7e8f7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	108	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1af1107ea6314600c8d26c7f8ce459b449baca7e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	107	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1af1107ea6314600c8d26c7f8ce459b449baca7e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	106	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b8d0428fe39a2ee9b1e2c338c71ea6036efe97c4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	105	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b8d0428fe39a2ee9b1e2c338c71ea6036efe97c4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	104	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c56128c13b8fd084b30fe88cf7b4707c59280ac8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	103	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c56128c13b8fd084b30fe88cf7b4707c59280ac8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	102	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b5434eca99898c6226291ed429ebab26af4472fd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	101	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b5434eca99898c6226291ed429ebab26af4472fd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	100	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\029b199ef0a583aafdb7d37b0d70edd6f8bfcc39 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	99	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\029b199ef0a583aafdb7d37b0d70edd6f8bfcc39 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:20 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	98	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3512	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:20 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4bc87013b1eec5dd0ecb5aa48e2dfce0a496fa18 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	97	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4bc87013b1eec5dd0ecb5aa48e2dfce0a496fa18 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	96	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f3d6c974bb86327f3f8f3fc540af83f29c8ed710 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	95	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f3d6c974bb86327f3f8f3fc540af83f29c8ed710 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	94	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\244344a54f99ce98428c30f3d97a777a38058525 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	93	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\244344a54f99ce98428c30f3d97a777a38058525 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	92	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\55bba27c330a7969277b748380d998de0e73e022 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	91	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\55bba27c330a7969277b748380d998de0e73e022 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	90	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\096c3f1a935ef80f041dc38b62049a855b204a78 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	89	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\096c3f1a935ef80f041dc38b62049a855b204a78 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	88	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c2e6ac62468cb8f9ca94ad5dbfa303b1a33a813f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	87	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c2e6ac62468cb8f9ca94ad5dbfa303b1a33a813f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	86	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1e3b1eb4018b1e00ef558cd8b0221025c7bde831 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	85	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1e3b1eb4018b1e00ef558cd8b0221025c7bde831 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	84	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a9d731c432954632f0ea44656aac1fc2ae24e983 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	83	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a9d731c432954632f0ea44656aac1fc2ae24e983 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	82	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c51790b3298dd758f91996abe114044146eae690 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	81	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\c51790b3298dd758f91996abe114044146eae690 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	80	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3c6a158224b5cdbb7584d34f3a4c7cbc33fddbdb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	79	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3c6a158224b5cdbb7584d34f3a4c7cbc33fddbdb Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	78	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\059b32a2d8480d69d01e646ebee36a14a900329c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	77	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\059b32a2d8480d69d01e646ebee36a14a900329c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	76	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3da88601eccc3dd410f4155c42e991ec8c4e9fb7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	75	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3da88601eccc3dd410f4155c42e991ec8c4e9fb7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	74	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2585dd40d2c5697a21de0f2496e117aa8439a4a1 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	73	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2585dd40d2c5697a21de0f2496e117aa8439a4a1 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	72	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8e11ee8b4e3bffb031a06430c886c5301e24c633 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	71	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8e11ee8b4e3bffb031a06430c886c5301e24c633 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	70	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\360d2af37dbdd4aa4d37903a91d56236ddb9319d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	69	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\360d2af37dbdd4aa4d37903a91d56236ddb9319d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	68	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b4abee2a96cf02853fe2728eae8d0da06cb31613 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	67	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b4abee2a96cf02853fe2728eae8d0da06cb31613 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	66	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b9b7340d8f110e74febdede6fdaf91db35395651 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	65	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b9b7340d8f110e74febdede6fdaf91db35395651 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	64	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a948ec7da7f10dc5d2eab6e4b5cbcf919439d888 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	63	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a948ec7da7f10dc5d2eab6e4b5cbcf919439d888 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	62	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b4f75d2ee680968e53df23e66c0a4e1ac935e0f8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	61	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b4f75d2ee680968e53df23e66c0a4e1ac935e0f8 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	60	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3520	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b6488e7417bbaebd175b7a96827d56cbcc6a303a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	59	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3492	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b6488e7417bbaebd175b7a96827d56cbcc6a303a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	58	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3492	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6e92e0cede3688e4dfc502533f01e44ce7a77b14 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	57	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3492	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\6e92e0cede3688e4dfc502533f01e44ce7a77b14 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3492	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\45937876637867fb72e616d6ca57a3bba43165fd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	2856	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.343.1095.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18300.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\45937876637867fb72e616d6ca57a3bba43165fd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?7/?16/?2021 7:50:19 AM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	2856	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:19 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	53	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	3476	n-h2-798054-12	S-1-5-18	7/16/2021 7:50:16 AM	04e071a4-244c-4640-9627-bf6f8c01edfb		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	2860	n-h2-798054-12	S-1-5-18	7/16/2021 7:49:31 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	2860	n-h2-798054-12	S-1-5-18	7/16/2021 7:49:31 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	2856	n-h2-798054-12	S-1-5-18	7/16/2021 7:49:29 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2432	2856	n-h2-798054-12	S-1-5-18	7/16/2021 7:49:29 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80004004 Error description: Operation aborted	2001	0		2	0	0	-9223372036854775808	48	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2776	n-h2-798054-12	S-1-5-18	7/16/2021 7:48:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE Error Code: 0x80004004 Error description: Operation aborted	2003	0		2	0	0	-9223372036854775808	47	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2776	n-h2-798054-12	S-1-5-18	7/16/2021 7:48:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: User Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80004004 Error description: Operation aborted	2001	0		2	0	0	-9223372036854775808	46	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2776	n-h2-798054-12	S-1-5-18	7/16/2021 7:48:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE Error Code: 0x80004004 Error description: Operation aborted	2003	0		2	0	0	-9223372036854775808	45	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2776	n-h2-798054-12	S-1-5-18	7/16/2021 7:48:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: User Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80004004 Error description: Operation aborted	2001	0		2	0	0	-9223372036854775808	44	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2776	n-h2-798054-12	S-1-5-18	7/16/2021 7:48:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:(null)	5008	0		2	0	0	-9223372036854775808	43	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	712	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:52 AM	894f9d0b-28db-4deb-a48a-3326c72e9717		microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.343.1095.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18300.4 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2544	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.343.1095.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18300.4 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2544	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.18300.4 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2544	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value:	5007	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2188	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:46 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2188	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:46 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2236	2188	WIN-5T344G8GM1H	S-1-5-18	7/16/2021 7:48:46 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	36	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:48 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:14:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	34	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	33	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17	5007	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E	5007	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation =	5007	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\	5007	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	26	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:45:57 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out	2001	0		2	0	0	-9223372036854775808	25	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1	5007	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2244	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	20	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	19	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	18	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:33:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0	2000	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x3	5007	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x0	5007	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	568	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:36 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\	5007	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2772	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM	2002	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version:	2000	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA	5007	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1	5007	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x1	5007	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x2	5007	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:16 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]