What does "RtpPluginStop" mean in Microsoft Defender Antivirus logs?

Hello,

I noticed the following entry in Microsoft Defender Antivirus Operational logs:

Diagnostics\CleanupComponentProgress:

CleanupCompleted -> RtpPluginStop

This appeared as Event ID 5007.

What exactly does "RtpPluginStop" mean?

Does it indicate:

• that Microsoft Defender Real-time Protection was disabled,
• that only an internal RTP-related plugin/component was stopped,
• or that it is simply part of a normal cleanup/shutdown process?

I could not find official documentation explaining this specific value.

Thanks.