Database: [Can't find offline cache cache (C:\WINDOWS\system32\MRT\B131AE89-7109-413F-ABD1-F62777B8D80A\mpcache-6DE3B502A4E52F1E8A456F4FA1B81ADC613D9F94.bin): 0x00000002]
MpGears Dynamic Config Error: Name = MpDisableLocalCleanStore, hrError = 0x8007007b
Engine-HIPS: [Loaded ASR vdm rule "Block use of copied or impersonated system tools", State=5, Action=0, Type=8, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block executable files from running unless they meet a prevalence, age, or trusted list criteria", State=5, Action=0, Type=1, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block credential stealing from the Windows local security authority subsystem (lsass.exe)", State=5, Action=7, Type=1, Duplicates(Interval=288000000000, scope=0x380)]
Engine-HIPS: [Loaded ASR vdm rule "Block Office applications from injecting code into other processes", State=5, Action=2, Type=24, Duplicates(Interval=144000000000, scope=0x380)]
Engine-HIPS: [Loaded ASR vdm rule "Block untrusted and unsigned processes that run from USB", State=5, Action=0, Type=1, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block Adobe Reader from creating child processes", State=5, Action=1, Type=1, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block Office applications from creating executable content", State=5, Action=0, Type=1, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block Webshell creation for Servers", State=5, Action=0, Type=1, Duplicates(Interval=0, scope=0x0)]
Engine-HIPS: [Loaded ASR vdm rule "Block Office communication application from creating child processes", State=5, Action=1, Type=1, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block Win32 API calls from Office macro", State=5, Action=0, Type=1, Duplicates(Interval=1200000000, scope=0x100)]
Engine-HIPS: [Loaded ASR vdm rule "Block abuse of in-the-wild exploited vulnerable sig