Trojaner Trojan.Multi.BroSubsc.gen

Protokollname: Microsoft-Windows-Windows Defender/Operational
Quelle:        Microsoft-Windows-Windows Defender
Datum:         02.08.2023 01:05:24
Ereignis-ID:   2010
Aufgabenkategorie:Keine
Ebene:         Informationen
Schlüsselwörter:
Benutzer:      SYSTEM
Computer:      DESKTOP-OCHEK1J
Beschreibung:
Microsoft Defender Antivirus ûŝέđ ¢ŀõμδ ρřőţęсŧϊøπ тθ ģėτ ãδďїŧїοйâŀ ѕĕċύяĩŧý ϊñтéĺłìĝëл¢ę.%ñ %ŧСцřŗëпť šèсüѓіŧу ΐʼnţęℓĺĭģëņċ℮ Vėґşìоη:%в1.393.2020.0%ή %τŞē¢úґϊтý іńţεļļĩģèиćė Ţýρε:%ь%ŋ %ťŮѕęř:%ь\%ñ %ťĊųŕřëпŧ Ёπĝįⁿé Věŕśϊőŋ:%в1.1.23060.1005%ņ %ŧСľόύđ φŗōτęčţіоñ ϊʼnтєļłĭĝëʼnčέ Τўρе:%ъUpdate der Sicherheitsinformationen%η %ţРέѓŝіŝŧэή¢έ Ρǻťĥ:%вC:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1d24899a5a7a9504bafe52c5e969d1130ca816d0%ņ %тĈľόũď ρŕоτěčţϊǿη ϊñťëľĺįġёñςε Vёŕŝίσʼn:%ъ0.0.0.0%η %ţĈŀõµď φѓòťĕćτįθп ϊʼnţєłŀΐğėŋçё Ċθmρìļäŧīõл Ţîmёşτąмφ:%в01.08.2023 23:05:28%ñ %тРεřѕįŝţєлçē £ímΐť Ŧÿρз:%ьDauer%ń %ţРёřşιѕтèńċé Ĺϊmįт:%в3000000
Ereignis-XML:
<Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Windows Defender" Guid="{11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78}" />
    <EventID>2010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2023-08-01T23:05:24.1680062Z" />
    <EventRecordID>32</EventRecordID>
    <Correlation />
    <Execution ProcessID="5220" ThreadID="10564" />
    <Channel>Microsoft-Windows-Windows Defender/Operational</Channel>
    <Computer>DESKTOP-OCHEK1J</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Product Name">Microsoft Defender Antivirus</Data>
    <Data Name="Product Version">4.18.2303.8</Data>
    <Data Name="Current security intelligence Version">1.393.2020.0</Data>
    <Data Name="Unused">
    </Data>
    <Data Name="Unused2">
    </Data>
    <Data Name="Unused3">
    </Data>
    <Data Name="Unused4">
    </Data>
    <Data Name="Domain">
    </Data>
    <Data Name="User">
    </Data>
    <Data Name="SID">
    </Data>
    <Data Name="Security intelligence Type Index">0</Data>
    <Data Name="Security intelligence Type">
    </Data>
    <Data Name="Unused5">
    </Data>
    <Data Name="Unused6">
    </Data>
    <Data Name="Current Engine Version">1.1.23060.1005</Data>
    <Data Name="Unused7">
    </Data>
    <Data Name="Unused8">
    </Data>
    <Data Name="Unused9">
    </Data>
    <Data Name="Unused10">
    </Data>
    <Data Name="Unused11">
    </Data>
    <Data Name="Unused12">
    </Data>
    <Data Name="Cloud protection intelligence Type Index">1</Data>
    <Data Name="Cloud protection intelligence Type">Update der Sicherheitsinformationen</Data>
    <Data Name="Persistence Path">C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1d24899a5a7a9504bafe52c5e969d1130ca816d0</Data>
    <Data Name="Cloud protection intelligence Version">0.0.0.0</Data>
    <Data Name="Cloud protection intelligence Compilation Timestamp">01.08.2023 23:05:28</Data>
    <Data Name="Persistence Limit Type Index">2</Data>
    <Data Name="Persistence Limit Type">Dauer</Data>
    <Data Name="Persistence Limit Value">3000000</Data>
  </EventData>
</Event>