MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.18900.2 Signature version: 1.357.42.0 11500400-922337203685477580879Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042940n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 4:24:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\32fc3a15c4ab3219aab77099aa5fe9addceb05cd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580878Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\32fc3a15c4ab3219aab77099aa5fe9addceb05cd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580877Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f190fcbee796ffa5a464c5491a565bb164832e4e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580876Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\f190fcbee796ffa5a464c5491a565bb164832e4e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580875Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\886065b9cd5ded70baf4e31c6a1de282d56b787f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580874Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\886065b9cd5ded70baf4e31c6a1de282d56b787f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580873Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\491e8a53a3c563eb77c7c352bae968821a904739 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580872Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\491e8a53a3c563eb77c7c352bae968821a904739 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580871Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5b482a5910f1c6f0d317754a7b15f35941bf023e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580870Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5b482a5910f1c6f0d317754a7b15f35941bf023e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580869Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\553f0db78d65b7d025249f744c42fd896418c3bd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580868Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\553f0db78d65b7d025249f744c42fd896418c3bd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:56 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580867Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:56 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2835bcf79e92f84cc901109670838ae4ec90ce78 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:54 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580866Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2835bcf79e92f84cc901109670838ae4ec90ce78 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:54 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580865Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5fc770fba57159229e11e6021eb70a2fb6be96a9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:54 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580864Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5fc770fba57159229e11e6021eb70a2fb6be96a9 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:54 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580863Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0a1892bc695d2c16640fcc4995a9e4238a5ab311 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:54 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580862Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0a1892bc695d2c16640fcc4995a9e4238a5ab311 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:54 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580861Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ee2144f63c6f6bbc67a010f8a60ddba1251ac39c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:55 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580860Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ee2144f63c6f6bbc67a010f8a60ddba1251ac39c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 3:29:55 PM Persistence Limit Type: Duration Persistence Limit: 15019622420100400-922337203685477580859Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational25042144n-h1-805649-25.cbci-805649-25.localS-1-5-182/3/2022 3:29:55 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\961298cf0fa088ac8a1e06a9944d232150688dc7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:19 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580858Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362828n-h1-805649-25S-1-5-182/3/2022 2:57:19 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\961298cf0fa088ac8a1e06a9944d232150688dc7 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:19 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580857Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362828n-h1-805649-25S-1-5-182/3/2022 2:57:19 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\895240adc40c3970d2415c9e142b180594c4be2f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:19 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580856Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362828n-h1-805649-25S-1-5-182/3/2022 2:57:19 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\895240adc40c3970d2415c9e142b180594c4be2f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:19 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580855Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362828n-h1-805649-25S-1-5-182/3/2022 2:57:19 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\23c0e92d4b2a1540ae50f2fa6b8504948df57b0a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580854Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363596n-h1-805649-25S-1-5-182/3/2022 2:57:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\23c0e92d4b2a1540ae50f2fa6b8504948df57b0a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580853Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363596n-h1-805649-25S-1-5-182/3/2022 2:57:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\38985b8ff1dbeca6d840dd38e0b167240a23a7fa Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580852Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363568n-h1-805649-25S-1-5-182/3/2022 2:57:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\38985b8ff1dbeca6d840dd38e0b167240a23a7fa Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:18 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580851Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363568n-h1-805649-25S-1-5-182/3/2022 2:57:18 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\256cdd73fa250bb01eb052993c55cf20dfa7d119 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:17 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580850Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362832n-h1-805649-25S-1-5-182/3/2022 2:57:17 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\256cdd73fa250bb01eb052993c55cf20dfa7d119 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:17 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580849Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362832n-h1-805649-25S-1-5-182/3/2022 2:57:17 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\60fe35de6b39b5fbd59d58628d44d1bfc3f89b10 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580848Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363580n-h1-805649-25S-1-5-182/3/2022 2:57:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\60fe35de6b39b5fbd59d58628d44d1bfc3f89b10 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580847Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363580n-h1-805649-25S-1-5-182/3/2022 2:57:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\991ff8036a4a50021f6bcb0ce50a91045378ccff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580846Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363596n-h1-805649-25S-1-5-182/3/2022 2:57:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\991ff8036a4a50021f6bcb0ce50a91045378ccff Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:16 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580845Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24363596n-h1-805649-25S-1-5-182/3/2022 2:57:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\54381fbe655e616bf47d602290e75b8a9c8fafbd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:15 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580844Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362512n-h1-805649-25S-1-5-182/3/2022 2:57:15 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.357.42.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18900.2 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\54381fbe655e616bf47d602290e75b8a9c8fafbd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?2/?3/?2022 2:57:15 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580843Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24362512n-h1-805649-25S-1-5-182/3/2022 2:57:15 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580842Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22682772WIN-5T344G8GM1HS-1-5-182/3/2022 2:47:04 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 119.0.0.0 Previous Signature Version: 118.2.0.0 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.020000400-922337203685477580841Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22682772WIN-5T344G8GM1HS-1-5-182/3/2022 2:47:04 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.357.42.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18900.2 Previous Engine Version: 1.1.14500.520000400-922337203685477580840Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22682668WIN-5T344G8GM1HS-1-5-182/3/2022 2:46:58 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.357.42.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18900.2 Previous Engine Version: 1.1.14500.520000400-922337203685477580839Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22682668WIN-5T344G8GM1HS-1-5-182/3/2022 2:46:58 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.18900.2 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580838Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22682668WIN-5T344G8GM1HS-1-5-182/3/2022 2:46:58 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value: 50070400-922337203685477580837Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22682688WIN-5T344G8GM1HS-1-5-182/3/2022 2:46:57 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580836Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580835Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:14:50 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580834Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580833Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580832Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580831Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x1750070400-922337203685477580830Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E50070400-922337203685477580829Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation = 50070400-922337203685477580828Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\50070400-922337203685477580827Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580826Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out 20010200-922337203685477580825Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580824Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580823Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580822Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x150070400-922337203685477580821Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162244WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580820Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580819Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580818Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580817Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:33:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580816Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.020000400-922337203685477580815Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport 50070400-922337203685477580814Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x350070400-922337203685477580813Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580812Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580811Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580810Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x050070400-92233720368547758089Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2136568WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:36 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\50070400-92233720368547758088Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242772WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM20020400-92233720368547758087Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version: 20000400-92233720368547758086Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport 50070400-92233720368547758085Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA50070400-92233720368547758084Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x150070400-92233720368547758083Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x150070400-92233720368547758082Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x250070400-92233720368547758081Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]